Getting Started Guide

JUNOS™ Software with Enhanced Services J-series Services Router

Getting Started Guide

Release 9.2

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000

www.juniper.net Part Number: 530-025664-01, Revision 1a

This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright © 1986-1997, Epilogue Technology Corporation. All rights reserved. This program and its documentation were developed at private expense, and no part of them is in the public domain. This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto. This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. All of the documentation and software included in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by the Regents of the University of California. Copyright © 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved. GateD software copyright © 1995, the Regents of the University. All rights reserved. Gate Daemon was originated and developed through release 3.0 by Cornell University and its collaborators. Gated is based on Kirton’s EGP, UC Berkeley’s routing daemon (routed), and DCN’s HELLO routing protocol. Development of Gated has been supported in part by the National Science Foundation. Portions of the GateD software copyright © 1988, Regents of the University of California. All rights reserved. Portions of the GateD software copyright © 1991, D. L. S. Associates. This product includes software developed by Maker Communications, Inc., copyright © 1996, 1997, Maker Communications, Inc. Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. JUNOS and JUNOSe are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785. JUNOS™ Software with Enhanced Services J-series Services Router Getting Started Guide Release 9.2 Copyright © 2008, Juniper Networks, Inc. All rights reserved. Printed in USA. Revision History August 2008—Revision 1a August 2008—Revision 1 The information in this document is current as of the date listed in the revision history. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. The JUNOS software has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. SOFTWARE LICENSE The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the extent applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this software, you indicate that you understand and agree to be bound by those terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses. The software license may state conditions under which the license is automatically terminated. You should consult the license for further details. For complete product documentation, please see the Juniper Networks Web site at www.juniper.net/techpubs.

ii

■

END USER LICENSE AGREEMENT READ THIS END USER LICENSE AGREEMENT (“AGREEMENT”) BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE. BY DOWNLOADING, INSTALLING, OR USING THE SOFTWARE OR OTHERWISE EXPRESSING YOUR AGREEMENT TO THE TERMS CONTAINED HEREIN, YOU (AS CUSTOMER OR IF YOU ARE NOT THE CUSTOMER, AS A REPRESENTATIVE/AGENT AUTHORIZED TO BIND THE CUSTOMER) CONSENT TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED HEREIN, THEN (A) DO NOT DOWNLOAD, INSTALL, OR USE THE SOFTWARE, AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS. 1. The Parties. The parties to this Agreement are (i) Juniper Networks, Inc. (if the Customer’s principal office is located in the Americas) or Juniper Networks (Cayman) Limited (if the Customer’s principal office is located outside the Americas) (such applicable entity being referred to herein as “Juniper”), and (ii) the person or organization that originally purchased from Juniper or an authorized Juniper reseller the applicable license(s) for use of the Software (“Customer”) (collectively, the “Parties”). 2. The Software. In this Agreement, “Software” means the program modules and features of the Juniper or Juniper-supplied software, for which Customer has paid the applicable license or support fees to Juniper or an authorized Juniper reseller, or which was embedded by Juniper in equipment which Customer purchased from Juniper or an authorized Juniper reseller. “Software” also includes updates, upgrades and new releases of such software. “Embedded Software” means Software which Juniper has embedded in or loaded onto the Juniper equipment and any updates, upgrades, additions or replacements which are subsequently embedded in or loaded onto the equipment. 3. License Grant. Subject to payment of the applicable fees and the limitations and restrictions set forth herein, Juniper grants to Customer a non-exclusive and non-transferable license, without right to sublicense, to use the Software, in executable form only, subject to the following use restrictions: a. Customer shall use Embedded Software solely as embedded in, and for execution on, Juniper equipment originally purchased by Customer from Juniper or an authorized Juniper reseller. b. Customer shall use the Software on a single hardware chassis having a single processing unit, or as many chassis or processing units for which Customer has paid the applicable license fees; provided, however, with respect to the Steel-Belted Radius or Odyssey Access Client software only, Customer shall use such Software on a single computer containing a single physical random access memory space and containing any number of processors. Use of the Steel-Belted Radius or IMS AAA software on multiple computers or virtual machines (e.g., Solaris zones) requires multiple licenses, regardless of whether such computers or virtualizations are physically contained on a single chassis. c. Product purchase documents, paper or electronic user documentation, and/or the particular licenses purchased by Customer may specify limits to Customer’s use of the Software. Such limits may restrict use to a maximum number of seats, registered endpoints, concurrent users, sessions, calls, connections, subscribers, clusters, nodes, realms, devices, links, ports or transactions, or require the purchase of separate licenses to use particular features, functionalities, services, applications, operations, or capabilities, or provide throughput, performance, configuration, bandwidth, interface, processing, temporal, or geographical limits. In addition, such limits may restrict the use of the Software to managing certain kinds of networks or require the Software to be used only in conjunction with other specific Software. Customer’s use of the Software shall be subject to all such limitations and purchase of all applicable licenses. d. For any trial copy of the Software, Customer’s right to use the Software expires 30 days after download, installation or use of the Software. Customer may operate the Software after the 30-day trial period only if Customer pays for a license to do so. Customer may not extend or create an additional trial period by re-installing the Software after the 30-day trial period. e. The Global Enterprise Edition of the Steel-Belted Radius software may be used by Customer only to manage access to Customer’s enterprise network. Specifically, service provider customers are expressly prohibited from using the Global Enterprise Edition of the Steel-Belted Radius software to support any commercial network access services. The foregoing license is not transferable or assignable by Customer. No license is granted herein to any user who did not originally purchase the applicable license(s) for the Software from Juniper or an authorized Juniper reseller. 4. Use Prohibitions. Notwithstanding the foregoing, the license provided herein does not permit the Customer to, and Customer agrees not to and shall not: (a) modify, unbundle, reverse engineer, or create derivative works based on the Software; (b) make unauthorized copies of the Software (except as necessary for backup purposes); (c) rent, sell, transfer, or grant any rights in and to any copy of the Software, in any form, to any third party; (d) remove any proprietary notices, labels, or marks on or in any copy of the Software or any product in which the Software is embedded; (e) distribute any copy of the Software to any third party, including as may be embedded in Juniper equipment sold in the secondhand market; (f) use any ‘locked’ or key-restricted feature, function, service, application, operation, or capability without first purchasing the applicable license(s) and obtaining a valid key from Juniper, even if such feature, function, service, application, operation, or capability is enabled without a key; (g) distribute any key for the Software provided by Juniper to any third party; (h) use the Software in any manner that extends or is broader than the uses purchased by Customer from Juniper or an authorized Juniper reseller; (i) use Embedded Software on non-Juniper equipment; (j) use Embedded Software (or make it available for use) on Juniper equipment that the Customer did not originally purchase from Juniper or an authorized Juniper reseller; (k) disclose the results of testing or benchmarking of the Software to any third party without the prior written consent of Juniper; or (l) use the Software in any manner other than as expressly provided herein. 5. Audit. Customer shall maintain accurate records as necessary to verify compliance with this Agreement. Upon request by Juniper, Customer shall furnish such records to Juniper and certify its compliance with this Agreement.

■

iii

6. Confidentiality. The Parties agree that aspects of the Software and associated documentation are the confidential property of Juniper. As such, Customer shall exercise all reasonable commercial efforts to maintain the Software and associated documentation in confidence, which at a minimum includes restricting access to the Software to Customer employees and contractors having a need to use the Software for Customer’s internal business purposes. 7. Ownership. Juniper and Juniper’s licensors, respectively, retain ownership of all right, title, and interest (including copyright) in and to the Software, associated documentation, and all copies of the Software. Nothing in this Agreement constitutes a transfer or conveyance of any right, title, or interest in the Software or associated documentation, or a sale of the Software, associated documentation, or copies of the Software. 8. Warranty, Limitation of Liability, Disclaimer of Warranty. The warranty applicable to the Software shall be as set forth in the warranty statement that accompanies the Software (the “Warranty Statement”). Nothing in this Agreement shall give rise to any obligation to support the Software. Support services may be purchased separately. Any such support shall be governed by a separate, written support services agreement. TO THE MAXIMUM EXTENT PERMITTED BY LAW, JUNIPER SHALL NOT BE LIABLE FOR ANY LOST PROFITS, LOSS OF DATA, OR COSTS OR PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, OR FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT, THE SOFTWARE, OR ANY JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. IN NO EVENT SHALL JUNIPER BE LIABLE FOR DAMAGES ARISING FROM UNAUTHORIZED OR IMPROPER USE OF ANY JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. EXCEPT AS EXPRESSLY PROVIDED IN THE WARRANTY STATEMENT TO THE EXTENT PERMITTED BY LAW, JUNIPER DISCLAIMS ANY AND ALL WARRANTIES IN AND TO THE SOFTWARE (WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE), INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT DOES JUNIPER WARRANT THAT THE SOFTWARE, OR ANY EQUIPMENT OR NETWORK RUNNING THE SOFTWARE, WILL OPERATE WITHOUT ERROR OR INTERRUPTION, OR WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK. In no event shall Juniper’s or its suppliers’ or licensors’ liability to Customer, whether in contract, tort (including negligence), breach of warranty, or otherwise, exceed the price paid by Customer for the Software that gave rise to the claim, or if the Software is embedded in another Juniper product, the price paid by Customer for such other product. Customer acknowledges and agrees that Juniper has set its prices and entered into this Agreement in reliance upon the disclaimers of warranty and the limitations of liability set forth herein, that the same reflect an allocation of risk between the Parties (including the risk that a contract remedy may fail of its essential purpose and cause consequential loss), and that the same form an essential basis of the bargain between the Parties. 9. Termination. Any breach of this Agreement or failure by Customer to pay any applicable fees due shall result in automatic termination of the license granted herein. Upon such termination, Customer shall destroy or return to Juniper all copies of the Software and related documentation in Customer’s possession or control. 10. Taxes. All license fees payable under this agreement are exclusive of tax. Customer shall be responsible for paying Taxes arising from the purchase of the license, or importation or use of the Software. If applicable, valid exemption documentation for each taxing jurisdiction shall be provided to Juniper prior to invoicing, and Customer shall promptly notify Juniper if their exemption is revoked or modified. All payments made by Customer shall be net of any applicable withholding tax. Customer will provide reasonable assistance to Juniper in connection with such withholding taxes by promptly: providing Juniper with valid tax receipts and other required documentation showing Customer’s payment of any withholding taxes; completing appropriate applications that would reduce the amount of withholding tax to be paid; and notifying and assisting Juniper in any audit or tax proceeding related to transactions hereunder. Customer shall comply with all applicable tax laws and regulations, and Customer will promptly pay or reimburse Juniper for all costs and damages related to any liability incurred by Juniper as a result of Customer’s non-compliance or delay with its responsibilities herein. Customer’s obligations under this Section shall survive termination or expiration of this Agreement. 11. Export. Customer agrees to comply with all applicable export laws and restrictions and regulations of any United States and any applicable foreign agency or authority, and not to export or re-export the Software or any direct product thereof in violation of any such restrictions, laws or regulations, or without all necessary approvals. Customer shall be liable for any such violations. The version of the Software supplied to Customer may contain encryption or other capabilities restricting Customer’s ability to export the Software without an export license. 12. Commercial Computer Software. The Software is “commercial computer software” and is provided with restricted rights. Use, duplication, or disclosure by the United States government is subject to restrictions set forth in this Agreement and as provided in DFARS 227.7201 through 227.7202-4, FAR 12.212, FAR 27.405(b)(2), FAR 52.227-19, or FAR 52.227-14(ALT III) as applicable. 13. Interface Information. To the extent required by applicable law, and at Customer's written request, Juniper shall provide Customer with the interface information needed to achieve interoperability between the Software and another independently created program, on payment of applicable fee, if any. Customer shall observe strict obligations of confidentiality with respect to such information and shall use such information in compliance with any applicable terms and conditions upon which Juniper makes such information available. 14. Third Party Software. Any licensor of Juniper whose software is embedded in the Software and any supplier of Juniper whose products or technology are embedded in (or services are accessed by) the Software shall be a third party beneficiary with respect to this Agreement, and such licensor or vendor shall have the right to enforce this Agreement in its own name as if it were Juniper. In addition, certain third party software may be provided with the Software and is subject to the accompanying license(s), if any, of its respective owner(s). To the extent portions of the Software are distributed under and subject to open source licenses obligating Juniper to make the source code for such portions publicly available (such as the GNU General Public License (“GPL”) or the GNU Library General Public License (“LGPL”)), Juniper will make such source code portions (including Juniper modifications, as appropriate) available upon request for a period of up to three years from the date of distribution. Such request can be made in writing to Juniper Networks, Inc., 1194 N. Mathilda Ave., Sunnyvale, CA 94089, ATTN: General Counsel. You may obtain a copy of the GPL at http://www.gnu.org/licenses/gpl.html, and a copy of the LGPL at http://www.gnu.org/licenses/lgpl.html. 15. Miscellaneous. This Agreement shall be governed by the laws of the State of California without reference to its conflicts of laws principles. The provisions of the U.N. Convention for the International Sale of Goods shall not apply to this Agreement. For any disputes arising under this Agreement, the Parties hereby consent to the personal and exclusive jurisdiction of, and venue in, the state and federal courts within Santa Clara County, California. This Agreement constitutes the entire and sole agreement between Juniper and the Customer with respect to the Software, and supersedes all prior and contemporaneous

iv

■

agreements relating to the Software, whether oral or written (including any inconsistent terms contained in a purchase order), except that the terms of a separate written agreement executed by an authorized Juniper representative and Customer shall govern to the extent such terms are inconsistent or conflict with terms contained herein. No modification to this Agreement nor any waiver of any rights hereunder shall be effective unless expressly assented to in writing by the party to be charged. If any portion of this Agreement is held invalid, the Parties agree that such invalidity shall not affect the validity of the remainder of this Agreement. This Agreement and associated documentation has been written in the English language, and the Parties agree that the English version will govern. (For Canada: Les parties aux présentés confirment leur volonté que cette convention de même que tous les documents y compris tout avis qui s'y rattaché, soient redigés en langue anglaise. (Translation: The parties confirm that this Agreement and all related documentation is and will be in the English language)).

■

v

Abbreviated Table of Contents About This Guide

Part 1

JUNOS Software with Enhanced Services J-series Services Router Overview Chapter 1 Chapter 2 Chapter 3 Chapter 4

Part 2

Overview of Services Routers System Overview PIM Overview Services Router User Interface Overview

3 7 43 69

Installing a Services Router Chapter 5 Chapter 6 Chapter 7 Chapter 8 Chapter 9 Chapter 10

Part 3

Preparing for Router Installation Installing and Connecting a Services Router Establishing Basic Connectivity Installing JUNOS Software with Enhanced Services Configuring Secure Web Access Installing and Managing JUNOS Software with Enhanced Services Licenses

89 103 117 141 143 151

Maintaining Services Router Hardware Chapter 11 Chapter 12 Chapter 13

Part 4

Replacing Hardware Components Troubleshooting a Services Router Contacting Customer Support and Returning Hardware

161 199 205

J-series Requirements and Specifications Chapter 14 Chapter 15

Part 5

xvii

Network Cable Specifications and Connector Pinouts Safety and Regulatory Compliance Information

215 233

Index Index

277

Abbreviated Table of Contents

■

vii

JUNOS™ Software with Enhanced Services J-series Services Router Getting Started Guide

viii

■

Table of Contents About This Guide

xvii

Objectives ....................................................................................................xvii Audience .....................................................................................................xvii Document Conventions ...............................................................................xvii List of Technical Publications ........................................................................xix Documentation Feedback .............................................................................xix Requesting Technical Support .......................................................................xx

Part 1

JUNOS Software with Enhanced Services J-series Services Router Overview

Chapter 1

Overview of Services Routers J2320 J2350 J4350 J6350

Chapter 2

Services Services Services Services

Router Router Router Router

Overview Overview Overview Overview

3 .....................................................................4 .....................................................................4 .....................................................................5 .....................................................................6

System Overview

7

J2320 and J2350 Services Router Hardware Features ......................................7 J2320 and J2350 Chassis ...........................................................................8 J2320 and J2350 Midplane ......................................................................12 J2320 and J2350 Routing Engine Hardware ............................................12 J2320 and J2350 Boot Devices ................................................................12 J2320 and J2350 Front Panel ..................................................................13 Physical Interface Modules (PIMs) ....................................................14 Power Button and POWER LED ........................................................14 STATUS LED .....................................................................................15 ALARM LED ......................................................................................15 HA LED ............................................................................................16 RESET CONFIG Button .....................................................................16 Built-In Gigabit Ethernet Ports ..........................................................17 Console Port .....................................................................................17 AUX Port ..........................................................................................17 USB Port ...........................................................................................17 J2320 and J2350 External Compact Flashes ............................................18 J2320 Power System ...............................................................................18

Table of Contents

■

ix


J2350 Power System ...............................................................................18 J2320 and J2350 Cooling System ............................................................19 J4350 and J6350 Services Router Hardware Features ....................................20 J4350 and J6350 Chassis .........................................................................21 J4350 and J6350 Midplane ......................................................................25 J4350 and J6350 Routing Engine Hardware ............................................25 J4350 and J6350 Boot Devices ................................................................25 J4350 and J6350 Front Panel ..................................................................26 Physical Interface Modules (PIMs) ....................................................26 Power Button and POWER LED ........................................................27 STATUS LED .....................................................................................27 ALARM LED ......................................................................................28 HA LED ............................................................................................29 RESET CONFIG Button .....................................................................29 Built-In Gigabit Ethernet Ports ..........................................................29 Console Port .....................................................................................30 AUX Port ..........................................................................................30 USB Port ...........................................................................................30 J4350 Power System ...............................................................................30 J6350 Power System ...............................................................................31 J4350 and J6350 Cooling System ............................................................32 Software Overview ........................................................................................33 About JUNOS Software with Enhanced Services Architecture ..................33 Flow-Based Forwarding ....................................................................33 Packet-Based Processing ..................................................................34 About Secure Context and Router Context ..............................................34 JUNOS Software with Enhanced Services Processes ................................35 User Interfaces ........................................................................................36 Summary of JUNOS Software with Enhanced Services Features .............36 Chapter 3

PIM Overview

43

PIM Terms .....................................................................................................43 Field-Replaceable PIMs ..................................................................................46 J2320 and J2350 Field-Replaceable PIM and Module Summary ..............46 J4350 and J6350 Field-Replaceable PIM Summary ..................................47 1-Port, 6-Port, 8-Port, and 16-Port Gigabit Ethernet uPIMs ......................49 1-Port Gigabit Ethernet ePIMs .................................................................52 Dual-Port Serial PIM ................................................................................55 Dual-Port T1 or E1 PIM ...........................................................................56 Dual-Port Channelized T1/E1/ISDN PRI PIM ............................................57 T3 or E3 PIM ...........................................................................................59 Dual-Port Fast Ethernet PIM ....................................................................61 4-Port Fast Ethernet ePIM .......................................................................62 4-Port ISDN BRI PIMs ..............................................................................63 ADSL PIM ................................................................................................64 G.SHDSL PIM ..........................................................................................66

x

■

Table of Contents

Table of Contents

Chapter 4

Services Router User Interface Overview

69

User Interface Overview ................................................................................69 J-Web Overview ......................................................................................69 CLI Overview ..........................................................................................70 Before You Begin ...........................................................................................71 Using the J-Web Interface ..............................................................................71 Starting the J-Web Interface ....................................................................71 J-Web Layout ..........................................................................................72 Elements of the J-Web Interface ..............................................................72 Top Pane Elements ..........................................................................72 Main Pane Elements .........................................................................73 Side Pane Elements ..........................................................................74 Navigating the J-Web Interface ................................................................74 Navigating the Quick Configuration Pages ........................................75 Navigating the J-Web Configuration Editor .......................................75 Getting J-Web Help ...........................................................................76 J-Web Sessions ........................................................................................77 Using the Command-Line Interface ...............................................................77 CLI Command Hierarchy ........................................................................78 Starting the CLI .......................................................................................78 CLI Operational Mode .............................................................................79 CLI Configuration Mode ..........................................................................80 CLI Basics ...............................................................................................81 Editing Keystrokes ............................................................................81 Command Completion .....................................................................82 Online Help ......................................................................................83 Configuring the CLI Environment .....................................................84

Part 2

Installing a Services Router

Chapter 5

Preparing for Router Installation

89

General Site Guidelines ..................................................................................89 Rack Requirements .......................................................................................90 Rack Size and Strength for J2320 and J2350 Routers ..............................90 Rack Size and Strength for J4350 and J6350 Routers ..............................91 Connection to Building Structure ............................................................91 Router Environmental Tolerances .................................................................92 Fire Safety Requirements ..............................................................................92 Fire Suppression .....................................................................................92 Fire Suppression Equipment ...................................................................93 Power Guidelines, Requirements, and Specifications .....................................93 Site Electrical Wiring Guidelines ..............................................................94 Signaling Limitations ........................................................................94 Radio Frequency Interference ..........................................................94 Electromagnetic Compatibility .........................................................94 Router Power Requirements ...................................................................95

Table of Contents

■

xi


AC Power, Connection, and Power Cord Specifications ..........................95 DC Power, Connection, and Power Cable Specifications .........................97 Planning for Power Management ............................................................98 Network Cable Specifications ......................................................................100 ISDN Provisioning .......................................................................................100 Site Preparation Checklist ............................................................................101 Chapter 6

Installing and Connecting a Services Router

103

Before You Begin .........................................................................................103 Unpacking a J-series Services Router ...........................................................104 Installing J2320 and J2350 Routers .............................................................105 Installing J4350 and J6350 Routers .............................................................106 Connecting Interface Cables to Services Routers .........................................109 Chassis Grounding .......................................................................................109 Connecting Power .......................................................................................110 Connecting AC Power ...........................................................................110 Connecting DC Power ...........................................................................112 Powering a Services Router On and Off ......................................................115 Chapter 7

Establishing Basic Connectivity

117

Basic Connectivity Terms ............................................................................117 Basic Connectivity Overview .......................................................................118 Router Identification .............................................................................118 Root Password ......................................................................................119 Time Zone and System Time ................................................................119 Network Settings ...................................................................................119 Default Gateway ...................................................................................120 Backup Router ......................................................................................120 Loopback Address .................................................................................120 Built-In Ethernet Interface Address .......................................................120 Management Access .............................................................................121 Before You Begin .........................................................................................122 Connecting to a Services Router ..................................................................123 Connecting to the J-Web Interface ........................................................123 Connecting to the CLI Locally ................................................................125 Connecting to the CLI Remotely ...........................................................126 Configuring the Modem at the Router End .....................................127 Connecting the Modem to the Console Port ...................................128 Connecting to the CLI at the User End ............................................128 Configuring Basic Settings with J-Web Quick Configuration .........................129 Configuring Basic Settings Using the CLI Configuration Wizard ...................132 About the CLI Configuration Wizard .....................................................132 Using the JUNOS Software with Enhanced Services Configuration Wizard ...........................................................................................133 Configuring Basic Settings with a Configuration Editor ................................136 Verifying Basic Connectivity and the Configuration .....................................139 Displaying Basic Connectivity Configurations .......................................140

xii

■

Table of Contents

Table of Contents

Chapter 8

Installing JUNOS Software with Enhanced Services

141

Chapter 9

Configuring Secure Web Access

143

Secure Web Access Terms ...........................................................................143 Secure Web Access Overview ......................................................................144 Before You Begin .........................................................................................144 Generating SSL Certificates ...................................................................145 Configuring Secure Web Access ..................................................................145 Configuring Secure Web Access with a Configuration Editor .......................148 Verifying Secure Web Access ......................................................................149 Displaying an SSL Certificate Configuration ..........................................149 Displaying a Secure Access Configuration .............................................150 Chapter 10

Installing and Managing JUNOS Software with Enhanced Services Licenses

151

JUNOS Software with Enhanced Services License Overview ........................151 License Enforcement ............................................................................151 Software Feature Licenses ....................................................................152 License Key Components ......................................................................152 Before You Begin .........................................................................................153 Managing JUNOS Software with Enhanced Services Licenses with the J-Web Interface ...............................................................................................153 Adding New Licenses with the J-Web Interface .....................................154 Deleting Licenses with the J-Web Interface ...........................................154 Displaying License Keys with the J-Web interface .................................154 Downloading Licenses with the J-Web Interface ....................................155 Managing JUNOS Software with Enhanced Services Licenses with the CLI ........................................................................................................155 Adding New Licenses with the CLI ........................................................155 Deleting a License with the CLI .............................................................156 Saving License Keys with the CLI ..........................................................156 Verifying JUNOS Software with Enhanced Services License Management ....156 Displaying Installed Licenses ................................................................156 Displaying License Usage ......................................................................157 Displaying Installed License Keys .........................................................158

Part 3

Maintaining Services Router Hardware

Chapter 11

Replacing Hardware Components

161

Tools and Parts Required ............................................................................161 Replacing the Console Port Cable ................................................................162 Replacing a PIM ..........................................................................................162 Removing a PIM ...................................................................................162 Installing a PIM .....................................................................................164

Table of Contents

■

xiii


Replacing PIM Cables ..................................................................................165 Removing PIM Cables ...........................................................................165 Installing PIM Cables .............................................................................165 Removing and Replacing the Chassis Cover on J2320 and J2350 Routers ....166 Replacing Internal Compact Flashes on J2320 and J2350 Routers ...............168 Replacing Internal Compact Flashes on J4350 and J6350 Routers ...............171 Replacing External Compact Flashes ...........................................................174 Replacing USB Storage Devices ...................................................................176 Removing the USB Storage Device ........................................................176 Installing the USB Storage Device .........................................................177 Replacing DRAM Modules ...........................................................................178 Removing a DRAM Module ...................................................................179 Installing a DRAM Module .....................................................................180 Replacing Power System Components ........................................................181 Replacing AC Power Supply Cords ........................................................181 Removing an AC Power Supply from J6350 Routers .............................182 Installing an AC Power Supply in J6350 Routers ...................................183 Replacing DC Power Supply Cables .......................................................184 Removing a DC Power Supply ..............................................................185 Installing a DC Power Supply ................................................................186 Replacing Crypto Accelerator Modules on J2320 and J2350 Routers ...........188 Removing a J2320 or J2350 Crypto Accelerator Module ........................189 Installing a J2320 or J2350 Crypto Accelerator Module .........................190 Replacing Crypto Accelerator Modules on J4350 and J6350 Routers ...........191 Removing a J4350 or J6350 Crypto Accelerator Module ........................192 Installing a J4350 or J6350 Crypto Accelerator Module .........................194 Replacing Air Filters on J2350 Routers ........................................................195 Replacing Air Filters on J4350 and J6350 Routers .......................................196 Chapter 12

Troubleshooting a Services Router

199

Troubleshooting Hardware Components .....................................................199 Monitoring and Correcting Chassis Alarm Conditions ...........................199 Troubleshooting Power Management ....................................................201 Resetting the Configuration File When the Router Is Inaccessible ................202 Using the RESET CONFIG Button ..........................................................202 Changing the RESET CONFIG Button Behavior ......................................203 Contacting the Juniper Networks Technical Assistance Center .....................203 Chapter 13

Contacting Customer Support and Returning Hardware

205

Locating Component Serial Numbers ..........................................................205 J2320 and J2350 Chassis Serial Number and Agency Labels .................206 J4350 and J6350 Chassis Serial Number and Agency Labels .................207 PIM Serial Number Label ......................................................................208 Power Supply Serial Number Labels ......................................................208 Contacting Customer Support ......................................................................208 Information You Might Need to Supply to JTAC ....................................208

xiv

■

Table of Contents

Table of Contents

Return Procedure ........................................................................................208 Packing a Router or Component for Shipment ............................................209 Tools and Parts Required ......................................................................209 Packing the Services Router for Shipment ............................................210 Packing Components for Shipment .......................................................210

Part 4

J-series Requirements and Specifications

Chapter 14

Network Cable Specifications and Connector Pinouts

215

Serial PIM Cable Specifications ....................................................................215 RS-232 DTE Cable Pinout ......................................................................216 RS-232 DCE Cable Pinout .....................................................................217 RS-422/449 (EIA-449) DTE Cable Pinout ...............................................217 RS-422/449 (EIA-449) DCE Cable Pinout ...............................................219 EIA-530A DTE Cable Pinout ..................................................................220 EIA-530A DCE Cable Pinout ..................................................................221 V.35 DTE Cable Pinout ..........................................................................222 V.35 DCE Cable Pinout .........................................................................223 X.21 DTE Cable Pinout .........................................................................223 X.21 DCE Cable Pinout .........................................................................224 Fast Ethernet RJ-45 Connector Pinout .........................................................225 Gigabit Ethernet uPIM RJ-45 Connector Pinout ............................................225 Gigabit Ethernet ePIM RJ-45 Connector Pinout ............................................226 Chassis Console Port Pinouts .......................................................................226 E1 and T1 RJ-48 Cable Pinouts ....................................................................227 E3 and T3 BNC Connector Pinout ................................................................230 ADSL and G.SHDSL RJ-11 Connector Pinout ................................................230 ISDN RJ-45 Connector Pinout ......................................................................231 Chapter 15

Safety and Regulatory Compliance Information

233

Definition of Safety Warning Levels ............................................................233 Safety Guidelines and Warnings ..................................................................235 General Safety Guidelines and Warnings ...............................................235 Qualified Personnel Warning ..........................................................236 Preventing Electrostatic Discharge Damage ...................................237 Electrical Safety Guidelines and Warnings ............................................237 General Electrical Safety Guidelines ................................................238 AC Power Electrical Safety Guidelines ............................................239 DC Power Electrical Safety Guidelines ............................................240 Power Sources for Redundant Power Supplies ...............................241 DC Power Disconnection Warning .................................................241 DC Power Grounding Requirements and Warning ..........................242 DC Power Wiring Sequence Warning .............................................243 DC Power Wiring Terminations Warning .......................................245 Grounded Equipment Warning .......................................................246 Warning Statement for Norway and Sweden ..................................247

Table of Contents

■

xv


In Case of Electrical Accident .........................................................247 Multiple Power Supplies Disconnection Warning ............................247 Power Disconnection Warning .......................................................249 TN Power Warning .........................................................................250 Telecommunication Line Cord Warning .........................................251 Installation Safety Guidelines and Warnings .........................................252 Chassis Lifting Guidelines ...............................................................252 Installation Instructions Warning ....................................................252 Rack-Mounting Requirements and Warnings ..................................253 Ramp Warning ...............................................................................257 Laser and LED Safety Guidelines and Warnings ....................................257 General Laser Safety Guidelines ......................................................258 Class 1 Laser Product Warning .......................................................258 Class 1 LED Product Warning .........................................................258 Laser Beam Warning ......................................................................259 Radiation from Open Port Apertures Warning ................................260 Maintenance and Operational Safety Guidelines and Warnings ............261 Battery Handling Warning ..............................................................262 Jewelry Removal Warning ..............................................................263 Lightning Activity Warning .............................................................264 Operating Temperature Warning ....................................................265 Product Disposal Warning ..............................................................267 Agency Approvals ........................................................................................268 Compliance Statements for Environmental Requirements ..........................269 Lithium Battery .....................................................................................269 Compliance Statements for EMC Requirements ..........................................269 Canada .................................................................................................269 European Community ...........................................................................271 Japan ....................................................................................................272 United States ........................................................................................273 FCC Part 15 Statement ...................................................................273 FCC Part 68 Statement ...................................................................273

Part 5

Index Index ...........................................................................................................277

xvi

■

Table of Contents

About This Guide This preface provides the following guidelines for using the JUNOS™ Software with Enhanced Services J-series Services Router Getting Started Guide: ■

Objectives on page xvii

■

Audience on page xvii

■

Document Conventions on page xvii

■

List of Technical Publications on page xix

■

Documentation Feedback on page xix

■

Requesting Technical Support on page xx

Objectives This guide contains an overview, basic instructions, and specifications for J2320, J2350, J4350, and J6350 Services Routers running JUNOS software with enhanced services. It explains how to prepare your site for installation, unpack and install J-series Services Router and its components, power on the router, install licenses, and establish basic connectivity.

Audience This manual is designed for anyone who installs, sets up, configures, monitors, or administers a J-series Services Router running JUNOS software with enhanced services. The manual is intended for customers with technical knowledge of and experience with networks and network security, the Internet, and Internet routing protocols and network administrators who install, configure, and manage Internet routers. Personnel operating the equipment must be trained and competent; must not conduct themselves in a careless, willfully negligent, or hostile manner; and must abide by the instructions provided by the documentation.

Document Conventions Table 1 on page xviii defines the notice icons used in this guide.

Objectives

■

xvii


Table 1: Notice Icons Icon

Meaning

Description

Informational note

Indicates important features or instructions.

Caution

Indicates a situation that might result in loss of data or hardware damage.

Warning

Alerts you to the risk of personal injury or death.

Laser warning

Alerts you to the risk of personal injury from a laser.

Table 2 on page xviii defines the text and syntax conventions used in this guide. Table 2: Text and Syntax Conventions Convention

Description

Examples

Bold text like this

Represents text that you type.

To enter configuration mode, type the configure command: user@host> configure

Fixed-width text like this

Represents output that appears on the terminal screen.

Italic text like this

■

Introduces important new terms.

■

Identifies book names.

■

Identifies RFC and Internet draft titles.

Italic text like this

Plain text like this

< > (angle brackets)

xviii

■

Document Conventions

user@host> show chassis alarms No alarms currently active ■

A policy term is a named structure that defines match conditions and actions.

■

JUNOS System Basics Configuration Guide

■

RFC 1997, BGP Communities Attribute

Represents variables (options for which you substitute a value) in commands or configuration statements.

Configure the machine’s domain name:

Represents names of configuration statements, commands, files, and directories; IP addresses; configuration hierarchy levels; or labels on routing platform components.

■

Enclose optional keywords or variables.

stub ;

[edit] root@# set system domain-name domain-name To configure a stub area, include the stub statement at the [edit protocols ospf area area-id]

hierarchy level. ■

The console port is labeled CONSOLE.

About This Guide

Table 2: Text and Syntax Conventions (continued) Convention

Description

Examples

| (pipe symbol)

Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity.

broadcast | multicast

# (pound sign)

Indicates a comment specified on the same line as the configuration statement to which it applies.

rsvp { # Required for dynamic MPLS only

[ ] (square brackets)

Enclose a variable for which you can substitute one or more values.

community name members [ community-ids ]

Indention and braces ( { } )

Identify a level in the configuration hierarchy.

; (semicolon)

Identifies a leaf statement at a configuration hierarchy level.

(string1 | string2 | string3)

[edit] routing-options { static { route default { nexthop address; retain; } } }

J-Web GUI Conventions

Bold text like this

Represents J-Web graphical user interface (GUI) items you click or select.

> (bold right angle bracket)

Separates levels in a hierarchy of J-Web selections.

■

In the Logical Interfaces box, select All Interfaces.

■

To cancel the configuration, click Cancel.

In the configuration editor hierarchy, select Protocols>Ospf.

List of Technical Publications For a complete list of JUNOS software with enhanced services for J-series Services Routers documents, see the Juniper Networks Technical Publications Web site at www.juniper.net/techpubs.

Documentation Feedback We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can send your comments to [email protected], or fill out the documentation feedback form at http://www.juniper.net/techpubs/docbug/docbugreport.html. If you are using e-mail, be sure to include the following information with your comments: ■

Document name

■

Document part number

List of Technical Publications

■

xix


■

Page number

■

Software release version (not required for Network Operations Guides [NOGs])

Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support contract, or are covered under warranty, and need postsales technical support, you can access our tools and resources online or open a case with JTAC. ■

JTAC policies—For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at http://www.juniper.net/customers/support/downloads/710059.pdf.

■

Product warranties—For product warranty information, visit http://www.juniper.net/support/warranty/.

■

JTAC Hours of Operation —The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year.

Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: ■

Find CSC offerings: http://www.juniper.net/customers/support/

■

Search for known bugs: http://www2.juniper.net/kb/

■

Find product documentation: http://www.juniper.net/techpubs/

■

Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/

■

Download the latest versions of software and review release notes: http://www.juniper.net/customers/csc/software/

■

Search technical bulletins for relevant hardware and software notifications: https://www.juniper.net/alerts/

■

Join and participate in the Juniper Networks Community Forum: http://www.juniper.net/company/communities/

■

Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/

To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool located at https://tools.juniper.net/SerialNumberEntitlementSearch/. Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone.

xx

■

■

Use the Case Management tool in the CSC at http://www.juniper.net/cm/ .

■

Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).

Requesting Technical Support

About This Guide

For international or direct-dial options in countries without toll-free numbers, visit us at http://www.juniper.net/support/requesting-support.html.


■

xxi


xxii

■


Part 1

JUNOS Software with Enhanced Services J-series Services Router Overview ■

Overview of Services Routers on page 3

■

System Overview on page 7

■

PIM Overview on page 43

■

Services Router User Interface Overview on page 69


■

1


2

■


Chapter 1

Overview of Services Routers J-series Services Routers running JUNOS software with enhanced services provide stable, reliable, and efficient IP routing, WAN and LAN connectivity, and management services for small to medium-sized enterprise networks. These routers also provide network security features, including a stateful firewall with access control policies and screens to protect against attacks and intrusions, and IPSec VPNs. J-series Services Routers securely connect small, branch, and regional offices to a central site router across Internet service provider (ISP) networks. J-series Services Routers run JUNOS software with enhanced services, which offers many advanced routing and security services. For more information about software features, see the “Summary of JUNOS Software with Enhanced Services Features” on page 36. You can use two user interfaces to monitor, configure, troubleshoot, and manage a Services Router: ■

J-Web interface—A Web-based graphical interface that allows you to operate a router without commands. The J-Web interface provides access to all JUNOS functionality and features. Quick Configuration wizards simplify basic configuration and minimize the risk of operator error.

■

JUNOS command-line interface—A Juniper Networks command shell that runs on top of a UNIX-based operating system kernel. The CLI is a straightforward command interface. On a single line, you type commands that are executed when you press the Enter key. The CLI provides command Help and command completion.

For an introduction to the J-Web and CLI interfaces, see “Services Router User Interface Overview” on page 69. For more information, see the J-Web Interface User Guide and the JUNOS CLI User Guide This chapter contains the following topics: ■

J2320 Services Router Overview on page 4

■


■


■


■

3


J2320 Services Router Overview The J2320 Services Router is primarily designed for remote and branch offices. It has a small chassis that is 1 U (rack unit) in size with a nonredundant AC power supply, an external compact flash and two universal serial bus (USB) ports for external storage, and an optional Crypto Accelerator Module. J2320 routers ordered with the optional Crypto Accelerator Module come standard with 1 GB of memory, while those ordered without the Crypto Accelerator Module come standard with 256 MB of memory. The memory on J2320 routers can be upgraded to 1 GB. For instructions on upgrading memory, see “Replacing DRAM Modules” on page 178. Each J2320 chassis contains four built-in Gigabit Ethernet ports with link speeds of 10/100/1000 Mbps over a copper interface. The chassis also contains three slots for field-replaceable Physical Interface Modules. The J2320 Services Router supports the following field-replaceable PIMs: ■

Gigabit Ethernet uPIM (1-port, 6-port, 8-port, and 16-port)

■

Dual-Port Serial PIM

■

Dual-Port E1 PIM

■

Dual-Port T1 PIM

■

Dual-Port Channelized T1/E1/ISDN PRI PIM

■

4-port ISDN BRI S/T or U PIM

■

ADSL 2/2+ Annex A PIM (1 port)

■

ADSL 2/2+ Annex B PIM (1 port)

■

G.SHDSL PIM (2 ports)

J2350 Services Router Overview The J2350 Services Router is primarily designed for branch offices. It has a chassis that is 1.5 U (rack unit) in size with a nonredundant AC or DC power supply, an external compact flash and two universal serial bus (USB) ports for external storage, and an optional Crypto Accelerator Module. J2350 routers ordered with the optional Crypto Accelerator Module come standard with 1 GB of memory, while those ordered without the Crypto Accelerator Module come standard with 256 MB of memory. The memory on J2350 routers can be upgraded to 1 GB. For instructions on upgrading memory, see “Replacing DRAM Modules” on page 178. Each J2350 chassis contains four built-in Gigabit Ethernet ports with link speeds of 10/100/1000 Mbps over a copper interface. The chassis also contains five slots for field-replaceable Physical Interface Modules (PIMs). The J2350 Services Router supports the following field-replaceable PIMs and modules:

4

■

J2320 Services Router Overview

Chapter 1: Overview of Services Routers

■

Gigabit Ethernet uPIM (1–port, 6-port, 8-port, and 16-port)

■


■

Dual-Port E1 PIM

■

Dual-Port T1 PIM

■


■


■


■


■


■

WXC Integrated Services Module

J4350 Services Router Overview The J4350 Services Router is designed primarily for regional and branch offices. It has a chassis that is 2 U (rack units) in size with a nonredundant AC or DC power supply, and a universal serial bus (USB) port for external storage. J4350 routers ordered with the optional Crypto Accelerator Module come standard with 1 GB of memory, while those ordered without the Crypto Accelerator Module come standard with 256 MB of memory. J4350 routers can contain between 256 MB and 2 GB of memory. For instructions on adding memory, see “Replacing DRAM Modules” on page 178. Each J4350 chassis contains four built-in Gigabit Ethernet ports with link speeds of 10/100/1000 Mbps over a copper interface, and six slots for field-replaceable Physical Interface Modules (PIMs). Two of the six slots (slots 3 and 6) support high-speed interfaces (ePIMs). The J4350 Services Router supports the following field-replaceable PIMs and modules: ■

Gigabit Ethernet uPIM (1-port, 6-port, 8-port, and 16-port)

■

SFP Gigabit Ethernet ePIM (1 port)

■

Copper Gigabit Ethernet ePIM (1 port)

■


■

Dual-Port E1 PIM

■

Dual-Port T1 PIM

■


■

E3 PIM (1 port)

■

DS3 (T3) PIM (1 port)

■

Dual-Port Fast Ethernet PIM

■

4-port Fast Ethernet ePIM

■



■

5


■


■


■


■


J6350 Services Router Overview The J6350 Services Router is designed primarily for regional and central offices. It has a chassis that is 2 U (rack units) in size with an optional redundant AC or DC power supply, up to 2 GB of memory, and two universal serial bus (USB) ports for external storage. The J6350 Services Router is a higher-performance system than the J4350 Services Router. J6350 routers come standard with 1 GB of memory and can be upgraded to 2 GB of memory. For instructions on adding memory, see “Replacing DRAM Modules” on page 178. Each J6350 chassis contains four built-in Gigabit Ethernet ports with link speeds of 10/100/1000 Mbps over a copper interface, and six slots for field-replaceable Physical Interface Modules (PIMs). Four of the six slots (slots 2, 3, 5, and 6) support high-speed interfaces (ePIMs). The J6350 Services Router supports the following field-replaceable PIMs and modules:

6

■

■

Gigabit Ethernet uPIM (1–port, 6-port, 8-port, and 16-port)

■

SFP Gigabit Ethernet ePIM (1 port)

■

Copper Gigabit Ethernet ePIM (1 port)

■

Dual-Port E1 PIM

■

Dual-Port T1 PIM

■

E3 PIM (1 port)

■

DS3 (T3) PIM (1 port)

■


■


■

4-port Fast Ethernet ePIM

■


■


■


■


■


■



Chapter 2

System Overview J-series Services Routers running JUNOS software with enhanced services have chassis that are similar but with important differences. J2320, J2350, and J4350 routers have a single nonredundant power supply and an optional Crypto Accelerator Module. J6350 routers have redundant power supplies and a standard Crypto Accelerator Module. For field-replaceable PIMs, the J2320 has three slots, the J2350 has five slots, and the J4350 and J6350 have six slots. Of the six slots, two on the J4350 and four on the J6350 are enhanced (high-speed) slots. All J-series routers run JUNOS software with enhanced services, which offers advanced routing and security features. This chapter contains the following topics: ■

J2320 and J2350 Services Router Hardware Features on page 7

■

J4350 and J6350 Services Router Hardware Features on page 20

■

Software Overview on page 33

J2320 and J2350 Services Router Hardware Features This section contains the following topics: ■

J2320 and J2350 Chassis on page 8

■

J2320 and J2350 Midplane on page 12

■

J2320 and J2350 Routing Engine Hardware on page 12

■

J2320 and J2350 Boot Devices on page 12

■

J2320 and J2350 Front Panel on page 13

■

J2320 and J2350 External Compact Flashes on page 18

■

J2320 Power System on page 18

■


■

J2320 and J2350 Cooling System on page 19

J2320 and J2350 Services Router Hardware Features

■

7


J2320 and J2350 Chassis The J2320 and J2350 chassis is a rigid sheet metal structure that houses all the other router components (see Figure 1 on page 8 through Figure 7 on page 11). The chassis can be installed in many types of racks or cabinets. For information about acceptable rack types, see “Rack Requirements” on page 90. In addition to the components described in subsequent sections, the chassis includes the following components: ■

Mounting brackets—One pair of metal brackets can be mounted at the front or center of the chassis for mounting the chassis in a rack or cabinet.

■

Earthing terminal—A protective earthing terminal and a PEM nut at the rear of the chassis ensure safe dissipation of static electricity in all situations.

■

ESD point—One electrostatic discharge (ESD) point, a banana plug receptacle at the front of the chassis, minimizes the risk of electrical discharge in potentially hazardous environments.

CAUTION: Before removing or installing components of a functioning router, attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap could result in damage to the router. The router must be connected to earth ground during normal operation. The protective earthing terminal on the rear of the chassis is provided to connect the router to ground (see Figure 3 on page 9). Additional grounding is provided to an AC-powered router when you plug its power supply into a grounded AC power receptacle. For additional safety information, see “Safety and Regulatory Compliance Information” on page 233.

Figure 1: Front of J2320 Chassis

8

■


Chapter 2: System Overview


Figure 3: Rear of J2320 Chassis

Figure 4: Rear of J2350 AC-Powered Chassis


■

9


Figure 5: Rear of J2350 DC-Powered Chassis

Figure 6: J2320 Hardware Components

10

■



Figure 7: J2350 Hardware Components

Table 3 on page 11 summarizes the physical specifications for the router chassis. Table 3: J2320 and J2350 Physical Specifications Description

Value

Chassis dimensions

■

■

Router weight

■

■

J2320 Services Router ■

1.75 in. (4.45 cm) high

■

17.51 in. (44.48 cm) wide—18.9 in. (48.01 cm) wide with mounting brackets attached

■

15.1 in. (38.35 cm) deep—plus 0.78 in. (1.98 cm) of hardware that protrudes from the chassis front


2.61 in. (6.63 cm) high

■


■



Minimum (no PIMs): 14.8 lbs (6.7 kg)

■

Maximum (three PIMs): 15.9 lbs (7.2 kg)


Minimum (no PIMs): 16.3 lbs (7.4 kg)

■

Maximum (five PIMs): 18.2 lbs (8.3 kg)


■

11


J2320 and J2350 Midplane The J2320 and J2350 midplane is located in the center of the chassis and forms the rear of the PIM card cage (see Figure 6 on page 10 and Figure 7 on page 11). You install the PIMs into the midplane from the front of the chassis. Data packets are transferred across the midplane from the PIM to the Routing Engine, and from the Routing Engine across the midplane to the destination PIM.

J2320 and J2350 Routing Engine Hardware The Routing Engine consists of the following components: ■

Processor—Creates the packet forwarding switch fabric for the router and runs JUNOS software to maintain the router's routing tables and routing protocols.

■

DRAM—Buffers incoming packets and provides storage for the routing and forwarding tables and for other Routing Engine processes. To view the amount of DRAM installed on your router, issue the show chassis routing-engine command.

■

EPROM—Stores the serial number of the Routing Engine. To view the serial number of the Routing Engine, issue either the show chassis routing-engine command or the show chassis hardware command.

■

Crypto Accelerator Module—Processor card that enhances performance of cryptographic algorithms used in IP security (IPSec) services. The cryptographic algorithms supported include Advanced Encryption Standard (AES), Data Encryption Standard (DES), triple DES (3DES), Hashed Message Authentication Code-Message Digest 5 (HMAC-MD5), and HMAC-Secure Hash Algorithm 1 (SHA-1). The Crypto Module is an optional feature of J2320 and J2350 Services Routers. To determine whether there is a Crypto Accelerator Module installed on your router, issue the show chassis hardware command.

■

Compact flash—Provides primary storage for software images, configuration files, and microcode. J-series routers have a primary or internal compact flash located on the system board. For information about replacing the internal compact flash, see “Replacing Internal Compact Flashes on J2320 and J2350 Routers” on page 168. J2320 and J2350 Services Routers also provide a slot in the rear of the chassis into which you can insert an additional external compact flash. For information about external compact flashes, see “J2320 and J2350 External Compact Flashes” on page 18.

J2320 and J2350 Boot Devices J2320 and J2350 Services Routers can boot from three devices:

12

■

■

Internal compact flash

■

External compact flash (also known as the removable compact flash)



■

USB storage device

Normally, a J2320 or J2350 Services Router boots from the internal compact flash. If the internal compact flash fails, the router attempts to boot from the external compact flash if it is installed. If the external compact flash is not present or fails, the router attempts to boot from the USB storage device.

J2320 and J2350 Front Panel The front panel of a J2320 or J2350 Services Router (see Figure 8 on page 13 and Figure 9 on page 13) allows you to install or remove PIMs, view router status LEDs, access the console port, and perform simple control functions. Figure 8: Front of J2320 Chassis


The components of the front panel, are described in the following sections: ■

Physical Interface Modules (PIMs) on page 14

■

Power Button and POWER LED on page 14

■

STATUS LED on page 15

■

ALARM LED on page 15

■

HA LED on page 16

■

RESET CONFIG Button on page 16

■

Built-In Gigabit Ethernet Ports on page 17


■

13


■

Console Port on page 17

■

AUX Port on page 17

■

USB Port on page 17

Physical Interface Modules (PIMs) Physical Interface Modules (PIMs) provide the physical connection to various network media types. For information about individual PIMs, see “Field-Replaceable PIMs” on page 46. For pinouts of PIM cable connectors, see “Network Cable Specifications and Connector Pinouts” on page 215. For PIM replacement instructions, see “Replacing a PIM” on page 162. The J2320 front panel has three slots and the J2350 front panel has five slots for field-replaceable PIMs. These slots are numbered from top to bottom and from left to right as shown in Figure 10 on page 14. Slot 0 is a fixed interface module that contains four built-in Gigabit Ethernet ports. For more information, see “Built-In Gigabit Ethernet Ports” on page 17. Figure 10: Slot Number Diagram on J2320 and J2350

Power Button and POWER LED The power button is located on the left side of the front panel (see Figure 1 on page 8). You can use the power button to power the Services Router on and off. When you power on the router, the Routing Engine boots as the power supply completes its startup sequence. The POWER LED is located to the upper left of the LED dashboard. Table 4 on page 14 describes the POWER LED. Table 4: J2320 and J2350 POWER LED Color

State

Description

Green

On steadily

Power is functioning correctly.

Blinking

Power button has been pressed and quickly released, and the router is gracefully shutting down.

Off

Router is not receiving power.

Unlit

14

■



After the router is powered on, status indicators—such as LEDs on the front panel and show chassis command output—can take up to 60 seconds to indicate that the power supply is functioning normally. Ignore error indicators that appear during the first 60 seconds. If you need to power off the router after the Routing Engine finishes booting, use the J-Web interface or the CLI to halt the Services Router first. For instructions, see the JUNOS Software with Enhanced Services Administration Guide. Alternatively, you can press and release the power button to gracefully shut down the router. For more information, see “Powering a Services Router On and Off” on page 115.

STATUS LED When the system is powered on, the STATUS LED changes from off to blinking green. Startup takes approximately 90 seconds to complete. If you want to turn the system off and on again, we recommend waiting a few seconds between shutting it down and powering it back up. Table 5 on page 15 describes the STATUS LED. Table 5: J2320 and J2350 STATUS LED Color

State

Description

Green

Blinking

Router is starting up or performing diagnostics.

On steadily

Router is operating normally.

Blinking

Error has been detected.

Red

ALARM LED The ALARM LED lights amber to indicate a minor condition that requires monitoring or maintenance and lights red to indicate a major condition that can result in a system shutdown. When the condition is corrected, the light turns off. Table 6 on page 15 describes the ALARM LED. Table 6: J2320 and J2350 ALARM LED Color

State

Description

Red

On steadily

Major alarm indicates a critical situation on the router that has resulted from one of the following conditions. A red alarm condition requires immediate action: ■

One or more hardware components have failed.

■

One or more hardware components have exceeded temperature thresholds.

■

An alarm condition configured on an interface has triggered a critical warning.


■

15


Table 6: J2320 and J2350 ALARM LED (continued) Color

State

Description

Yellow

On steadily

Minor alarm condition requires monitoring or maintenance:

Unlit

Off

■

Indicates a noncritical condition on the router that, if left unchecked, might cause an interruption in service or degradation in performance.

■

A missing rescue configuration or software license generates an amber system alarm.

No alarms.

For information about alarm conditions and corrective actions, see “Monitoring and Correcting Chassis Alarm Conditions” on page 199. For additional information, see the JUNOS Software with Enhanced Services Administration Guide.

HA LED The HA (high availability) LED is located in the front panel near the power status LED of the LED dashboard. The LED lights when the router starts, but otherwise remains unlit.Table 7 on page 16 describes the HA LED. Table 7: J2320 and J2350 HA LED Color

State

Description

Green

On steadily

All cluster members and monitored links are available.

Red

On steadily

A cluster member is missing or unreachable, or the other node is no longer part of a cluster because it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure.

Amber

On steadily

All cluster members are present, but one or more monitored links are down.

Unlit

Off

The node is not configured for clustering or it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure.

RESET CONFIG Button Use the RESET CONFIG button to return the router to a previous valid configuration or to the factory default configuration, or a rescue configuration. The button is recessed to prevent it from being pressed accidentally. For details about the RESET CONFIG button, see “Resetting the Configuration File When the Router Is Inaccessible” on page 202.

16

■



Built-In Gigabit Ethernet Ports Four built-in Gigabit Ethernet ports provide LAN connections over copper interfaces to hubs, switches, local servers, and workstations. You can also designate an Ethernet port for management traffic. When configuring one of these ports, you use the interface name that corresponds to the port’s location. From left to right on the front panel, the interface names for the ports are ge-0/0/0, ge-0/0/1, ge-0/0/2, and ge-0/0/3. For Gigabit Ethernet port pinout information, see “Gigabit Ethernet uPIM RJ-45 Connector Pinout” on page 225. Each port has two LEDs, a TX/RX LED on the left side and a LINK LED on the right side. Table 8 on page 17 describes the built-in Ethernet port LEDs. Table 8: Gigabit Ethernet Port LEDs Function

Color

State

Description

LINK

Green

On steadily

Port is online.

Unlit

Off

Port is offline.

Green

Blinking

Port is transmitting or receiving data.

Unlit

Off

Port might be online, but it is not receiving data.

TX/RX

Console Port You can use the console port on the chassis front panel to connect to the Routing Engine through an RJ-45 serial cable. From the chassis console port, you can use the CLI to configure the router. The console port is configured as data terminal equipment (DTE) and supports the RS-232 (EIA-232) standard. For information about securing the chassis console port, see the JUNOS Software with Enhanced Services Administration Guide. For pinout information, see “Chassis Console Port Pinouts” on page 226.

AUX Port The port labeled AUX on the front panel of the J-series Services Router is for future use and is not activated.

USB Port The USB ports on the front panel of the router (see Figure 8 on page 13 and Figure 9 on page 13) accept a USB storage device or USB storage device adapter with a compact flash installed, as defined in the CompactFlash Specification published by the CompactFlash Association. When a USB storage device is installed and configured, it automatically acts as a secondary boot device if the internal compact flash fails on startup. Depending on the size of the USB storage device, you can also configure it


■

17


to receive any core files generated during a failure. For information about configuring a USB storage device, see the JUNOS Software with Enhanced Services Administration Guide.

NOTE: For a list of supported USB storage devices, see the JUNOS Software with Enhanced Services Release Notes at http://www.juniper.net.

J2320 and J2350 External Compact Flashes On J2320 and J2350 routers, an external compact flash, also known as removable compact flash, accepts a type I or II compact flash, as defined in the CompactFlash Specification published by the CompactFlash Association. The J2320 and J2350 chassis has a slot on the rear for external compact flashes (see Figure 3 on page 9). When the external compact flash is installed and configured, it automatically acts as the secondary boot device if the internal compact flash fails on startup. Depending on the capacity of the external compact flash, you can also configure it to receive any core files generated during a failure. For information about configuring an external compact flash, see the JUNOS Software with Enhanced Services Administration Guide.

J2320 Power System The J2320 Services Router uses AC power (see Figure 3 on page 9). The autosensing power supply distributes the different output voltages to the router components according to their voltage requirements. The power supply is fixed in the chassis, and is not field-replaceable. The AC power supply has a single AC appliance inlet that requires a dedicated AC power feed. The J2320 AC-powered chassis has a power switch and does not include a power LED. For information about site power preparations, see “Power Guidelines, Requirements, and Specifications” on page 93. For information about connecting the router to power and ground, see “Connecting Power” on page 110.

J2350 Power System The J2350 Services Router uses either AC or DC power. The autosensing power supply (see Figure 4 on page 9 or Figure 5 on page 10) distributes the different output voltages to the router components according to their voltage requirements. The power supply is fixed in the chassis, and is not field-replaceable. The AC power supply has a single AC appliance inlet that requires a dedicated AC power feed. The DC power supply has a terminal block that provides a single DC input (–48 VDC and return) and requires a dedicated 15 A (–48 VDC) circuit breaker.

18

■



The J2350 AC-powered or DC-powered chassis has a power switch and does not include a power LED. For information about site power preparations, see “Power Guidelines, Requirements, and Specifications” on page 93. For information about connecting the router to power and ground, see “Connecting Power” on page 110.

NOTE: You cannot mix DC and AC power supplies in the same chassis.

WARNING: DC-powered Services Routers are intended for installation only in a restricted access location.

J2320 and J2350 Cooling System The cooling system in J2320 and J2350 routers is from side to side. The J2320 router has five cooling fans and the J2350 router has four cooling fans. The fans draw air through vents along the left side of the chassis and exhaust it through vents on the right side of the chassis. The airflow produced by these fans keeps router components within the acceptable temperature range (see Figure 11 on page 20 and Figure 12 on page 20). The speed of the fans is adjusted automatically according to the current temperature. On J2350 routers that comply with Network Equipment Building System (NEBS) criteria, an air filter protects the air intake opening at the front of the chassis and must be replaced periodically. To verify that the system is a NEBS-compliant system, run the show chassis hardware command. A NEBS-compliant system displays the term NEBS in the output. For instructions on how to replace air filters, see “Replacing Air Filters on J2350 Routers” on page 195. The Routing Engine monitors the temperature of the router components. If the maximum temperature specification, as measured at the CPU junction, is exceeded and the router cannot be adequately cooled, the Routing Engine shuts down the hardware components. J2320 and J2350 routers shut down when the CPU temperature reaches 80°C (176°F). There is no alarm for temperature. You can view the CPU junction temperature using the show chassis routing-engine command. The CPU temperature runs a few degrees higher than the routing engine temperature displayed on the Monitor>Chassis page of the J-Web interface. An additional fan is part of each power supply. This fan is not regulated by the operating system.


■

19


Figure 11: Airflow Through the J2320 Chassis

Figure 12: Airflow Through the J2350 Chassis

J4350 and J6350 Services Router Hardware Features This section contains the following topics:

20

■

■

J4350 and J6350 Chassis on page 21

■

J4350 and J6350 Midplane on page 25

■

J4350 and J6350 Routing Engine Hardware on page 25

■

J4350 and J6350 Boot Devices on page 25

■

J4350 and J6350 Front Panel on page 26

■




■


■

J4350 and J6350 Cooling System on page 32

J4350 and J6350 Chassis The J4350 and J6350 chassis is a rigid sheet metal structure that houses all the other router components (see Figure 13 on page 22 through Figure 18 on page 24). The chassis can be installed in many types of racks or cabinets. For information about acceptable rack types, see “Rack Requirements” on page 90. In addition to the features described in subsequent sections, the chassis includes the following features: ■

Mounting brackets—One pair of metal brackets can be mounted at the front or center of the chassis. Use the brackets for mounting the chassis in a rack or cabinet.

■

Earthing terminals—Two protective earthing terminals, PEM nuts at the rear of the chassis ensure safe dissipation of static electricity in all situations.

■

ESD point—One electrostatic discharge (ESD) point, a banana plug receptacle at the front of the chassis, minimizes the risk of electrical discharge in potentially hazardous environments.

CAUTION: Before removing or installing components of a functioning router, attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist. Failure to use an ESD strap could result in damage to the router. The router must be connected to earth ground during normal operation. The protective earthing terminals on the rear of the chassis are provided to connect the router to ground (see Figure 14 on page 22). Additional grounding is provided to an AC-powered router when you plug its power supply into a grounded AC power receptacle. For additional safety information, see “Safety and Regulatory Compliance Information” on page 233.


■

21


Figure 13: Front of J4350 and J6350 Chassis


NOTE: The J4350 AC-powered chassis has a power switch and does not include a power supply LED (unlike the J6350 AC-powered chassis).


22

■



Figure 16: Rear of J4350 DC-Powered Chassis

Figure 17: Rear of DC-Powered J6350 Chassis


■

23


Figure 18: J4350 and J6350 Hardware Components

Table 9 on page 24 summarizes the physical specifications for the router chassis. Table 9: J4350 and J6350 Physical Specifications Description

Value

Chassis dimensions

■

3.44 in. (8.74 cm) high

■


■


■

J4350 Services Router:

Router weight

■

24

■

■

Minimum (no PIMs): 23 lb (10.4 kg)

■

Maximum (six PIMs): 25.3 lb (11.5 kg)


Minimum (no PIMs and one power supply): 25.5 lb (11.6 kg)

■

Maximum (six PIMs and two power supplies): 30.7 lb (13.9 kg)



J4350 and J6350 Midplane The midplane is located in the center of the chassis and forms the rear of the PIM card cage (see Figure 18 on page 24). You install the PIMs into the midplane from the front of the chassis. Data packets are transferred across the midplane from the PIM to the Routing Engine, and from the Routing Engine across the midplane to the destination PIM.

J4350 and J6350 Routing Engine Hardware The Routing Engine consists of the following components. ■

Processor—Creates the packet forwarding switch fabric for the router and runs JUNOS Internet software to maintain the router's routing tables and routing protocols.

■

DRAM—Buffers incoming packets and provides storage for the routing and forwarding tables and for other Routing Engine processes. To view the amount of DRAM installed on your router, issue the show chassis routing-engine command.

■

EPROM—Stores the serial number of the Routing Engine. To view the serial number of the Routing Engine, issue either the show chassis routing-engine command or the show chassis hardware command.

■

Crypto Accelerator Module—Processor card that enhances performance of cryptographic algorithms used in IP security (IPSec) services. The cryptographic algorithms supported include Advanced Encryption Standard (AES), Data Encryption Standard (DES), triple DES (3DES), Hashed Message Authentication Code-Message Digest 5 (HMAC-MD5), and HMAC-Secure Hash Algorithm 1 (SHA-1). To determine whether there is a Crypto Accelerator Module installed on your router, issue the show chassis hardware command.

■

Compact flash—Provides primary storage for software images, configuration files, and microcode. J4350 and J6350 routers have a slot on the motherboard for an internal compact flash. For information about replacing the compact flash, see “Replacing Internal Compact Flashes on J4350 and J6350 Routers” on page 171.

J4350 and J6350 Boot Devices The J4350 and J6350 Services Routers can boot from two devices: ■

Internal compact flash

■

USB storage device

Normally, the J4350 or J6350 Services Router boots from the internal compact flash. If the compact flash fails, the router attempts to boot from the USB storage device.


■

25


J4350 and J6350 Front Panel The front panel of the Services Router (see Figure 19 on page 26) allows you to install or remove PIMs, view router status LEDs, access the console port, and perform simple control functions. Figure 19: Front of J4350 and J6350 Chassis

The components of the front panel, from left to right, are described in the following sections: ■

Physical Interface Modules (PIMs) on page 26

■

Power Button and POWER LED on page 27

■

STATUS LED on page 27

■

ALARM LED on page 28

■

HA LED on page 29

■

RESET CONFIG Button on page 29

■

Built-In Gigabit Ethernet Ports on page 29

■

Console Port on page 30

■

AUX Port on page 30

■

USB Port on page 30

Physical Interface Modules (PIMs) Physical Interface Modules (PIMs) provide the physical connection to various network media types. For information about individual PIMs, see “Field-Replaceable PIMs” on page 46. For pinouts of PIM cable connectors, see “Network Cable Specifications and Connector Pinouts” on page 215. For PIM replacement instructions, see “Replacing a PIM” on page 162. Each J4350 and J6350 Services Router has six front panel slots for field-replaceable PIMs. These slots are numbered from top to bottom and from left to right as shown in the slot number diagram on the front panel, shown in Figure 20 on page 27.

26

■



Figure 20: Slot Number Diagram on Front Panel

Gigabit Ethernet and 4-port Fast Ethernet ePIMs can be installed in high-speed slots only. High-speed slots are indicated by a black triangle containing an E in the front panel slot number diagram. On J4350 Services Routers, the high-speed slots are slot 3 and slot 6. On J6350 Services Routers, the high-speed slots are slots 2, 3, 5, and 6. Slot 0 is the fixed interface module that contains the built-in Ethernet ports.

Power Button and POWER LED The power button is located on the left side of the front panel (see Figure 19 on page 26). You can use the power button to power the Services Router on and off. When you power on the router, the Routing Engine boots as the power supply completes its startup sequence. The POWER LED is located to the upper left of the LED dashboard. Table 10 on page 27 describes the POWER LED. Table 10: POWER LED Color

State

Description

Green

On steadily

Power is functioning correctly.

Blinking

Power button has been pressed and quickly released, and the router is gracefully shutting down.

Off

Router is not receiving power.

Unlit

After the router is powered on, status indicators—such as LEDs on the front panel and show chassis command output—can take up to 60 seconds to indicate that the power supply is functioning normally. Ignore error indicators that appear during the first 60 seconds. If you need to power off the router after the Routing Engine finishes booting, use the J-Web interface or the CLI to halt the Services Router first. For instructions, see the JUNOS Software with Enhanced Services Administration Guide. Alternatively, you can press and release the power button to gracefully shut down the router. For more information, see “Powering a Services Router On and Off” on page 115.

STATUS LED When the system is powered on, the STATUS LED changes from off to blinking green. Startup takes approximately 90 seconds to complete. If you want to turn the system


■

27


off and on again, we recommend waiting a few seconds between shutting it down and powering it back up. Table 11 on page 28 describes the STATUS LED. Table 11: STATUS LED Color

State

Description

Green

Blinking

Router is starting up or performing diagnostics.

On steadily

Router is operating normally.

Blinking

Error has been detected.

Red

ALARM LED The ALARM LED lights yellow to indicate a minor condition that requires monitoring or maintenance and lights red to indicate a major condition that can result in a system shutdown. When the condition is corrected, the light turns off. Table 12 on page 28 describes the ALARM LED. Table 12: ALARM LED Color

State

Description

Red

On steadily

Major alarm indicates a critical situation on the router that has resulted from one of the following conditions. A red alarm condition requires immediate action:

Yellow

Unlit

On steadily

Off

■

One or more hardware components have failed.

■

One or more hardware components have exceeded temperature thresholds.

■

An alarm condition configured on an interface has triggered a critical warning.

Minor alarm condition requires monitoring or maintenance: ■

Indicates a noncritical condition on the router that, if left unchecked, might cause an interruption in service or degradation in performance.

■

A missing rescue configuration or software license generates a yellow system alarm.

No alarms.

For information about alarm conditions and corrective actions, see “Monitoring and Correcting Chassis Alarm Conditions” on page 199. For additional information, see the JUNOS Software with Enhanced Services Administration Guide.

28

■



HA LED The HA (high availability) LED is located in the front panel near the power status LED of the LED dashboard. The LED lights when the router starts, but otherwise remains unlit.Table 13 on page 29 describes the HA LED. Table 13: HA LED Color

State

Description

Green

On steadily

All cluster members and monitored links are available.

Red

On steadily

A cluster member is missing or unreachable, or the other node is no longer part of a cluster because it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure.

Amber

On steadily

All cluster members are present, but one or more monitored links are down.

Unlit

Off

The node is not configured for clustering or it has been disabled by the dual membership and detection recovery process in reaction to a control link or fabric link failure.

RESET CONFIG Button Use the RESET CONFIG button to return the router to a previous valid configuration or to the factory default configuration, or a rescue configuration. The button is recessed to prevent it from being pressed accidentally. For details about the RESET CONFIG button, see “Resetting the Configuration File When the Router Is Inaccessible” on page 202.

Built-In Gigabit Ethernet Ports Four built-in Gigabit Ethernet ports provide LAN connections over copper interfaces to hubs, switches, local servers, and workstations. You can also designate an Ethernet port for management traffic. When configuring one of these ports, you use the interface name that corresponds to the port’s location. From left to right on the front panel, the interface names for the ports are ge-0/0/0, ge-0/0/1, ge-0/0/2, and ge-0/0/3. For Gigabit Ethernet port pinout information, see “Gigabit Ethernet ePIM RJ-45 Connector Pinout” on page 226. Each port has two LEDs, a TX/RX LED on the left side and a LINK LED on the right side. Table 14 on page 29 describes the built-in Ethernet port LEDs. Table 14: Gigabit Ethernet Port LEDs Function

Color

State

Description

LINK

Green

On steadily

Port is online.

Unlit

Off

Port is offline.


■

29


Table 14: Gigabit Ethernet Port LEDs (continued) Function

Color

State

Description

TX/RX

Green

Blinking


Unlit

Off

Port might be online, but it is not receiving data.

Console Port You can use the console port on the chassis front panel to connect to the Routing Engine through an RJ-45 serial cable. From the chassis console port, you can use the CLI to configure the router. The console port is configured as data terminal equipment (DTE) and supports the RS-232 (EIA-232) standard. For information about securing the chassis console port, see the J-series Services Router Administration Guide. For pinout information, see “Chassis Console Port Pinouts” on page 226.

AUX Port The port labeled AUX on the front panel of the J4350 or J6350 Services Router is for future use and is not activated.

USB Port The USB ports on the front panel of the router (see Figure 19 on page 26) accept a USB storage device or USB storage device adapter with a compact flash installed, as defined in the CompactFlash Specification published by the CompactFlash Association. When a USB storage device is installed and configured, it automatically acts as a secondary boot device if the internal compact flash fails on startup. Depending on the size of the USB storage device, you can also configure it to receive any core files generated during a failure. For information about configuring a USB storage device, see the JUNOS Software with Enhanced Services Administration Guide.


J4350 Power System The J4350 Services Router uses either AC or DC power. The autosensing power supply (see Figure 14 on page 22 or Figure 16 on page 23) distributes the different output voltages to the router components according to their voltage requirements. The power supply is fixed in the chassis and is not field-replaceable. The AC power supply has a single AC appliance inlet that requires a dedicated AC power feed. The DC power supply has a terminal block that provides a single DC input (–48 VDC and return) and requires a dedicated 15 A (–48 VDC) circuit breaker.

30

■



The J4350 AC-powered chassis has a power switch and does not include a power LED. The J4350 DC-powered chassis includes a power supply LED located to the upper right of the power supply connector. Table 15 on page 31 describes the power supply LED. Table 15: Power Supply LED State

Description

Off

No power is flowing to the power supply.

Green

Power supply is connected and power is flowing.

Yellow

Power supply is connected, but the router is not powered on.

For information about site power preparations, see “Power Guidelines, Requirements, and Specifications” on page 93. For information about connecting the router to power and ground, see “Connecting Power” on page 110.



J6350 Power System The J6350 Services Router uses either AC or DC power. You can install one or two autosensing, load-sharing power supplies on the system board at the bottom of the chassis, as shown in Figure 15 on page 22 or Figure 17 on page 23. The power supplies distribute the different output voltages to the router components, depending on their voltage requirements. When two power supplies are installed and operational, they automatically share the electrical load. For full redundancy, two power supplies are required. If a power supply stops functioning for any reason, the second power supply instantly begins providing all the power the router needs for normal functioning. It can provide full power indefinitely. Each power supply has an LED located to the upper right of the power supply connector. Table 15 on page 31 describes the power supply LED. For information about site power preparations, see “Power Guidelines, Requirements, and Specifications” on page 93. For information about connecting the router to power and ground, see “Connecting Power” on page 110.


■

31


Power supplies on J6350 Services Routers are hot-removable and hot-insertable. You can remove and replace a redundant power supply without powering down the router or disrupting the routing functions. To avoid electrical injury, carefully follow the instructions in “Replacing Power System Components” on page 181.



J4350 and J6350 Cooling System The cooling system includes three fans at the rear of the chassis. The airflow produced by these fans keeps router components within the acceptable temperature range (see Figure 21 on page 33). The speed of the fans is adjusted automatically according to the current temperature. An air filter protects the air intake opening at the front of the chassis and must be replaced periodically. For instructions, see “Replacing Air Filters on J4350 and J6350 Routers” on page 196. The Routing Engine monitors the temperature of the router components. If the maximum temperature specification, as measured at the CPU junction, is exceeded and the router cannot be adequately cooled, the Routing Engine shuts down the hardware components. When the CPU temperature reaches 80°C (176°F), a yellow alarm is triggered. When the CPU temperature reaches 105°C (221°F), the system shuts down. There is no red alarm for temperature. You can view the CPU junction temperature using the show chassis routing-engine command. The CPU temperature runs a few degrees higher than the routing engine temperature displayed on the Monitor>Chassis page of the J-Web interface.

NOTE: On J4350 and J6350 routers that are not designed to comply with Network Equipment Building System (NEBS) criteria, the temperature at which the system shuts down is 90°C (194°F) rather than 105°C (221°F). To verify that the system is a NEBS-compliant system, run the show chassis hardware command. A NEBS-compliant system displays the term NEBS in the output. An additional fan is part of each power supply. This fan is not regulated by the operating system.

32

■



Figure 21: Airflow Through the J4350 and J6350 Chassis

Software Overview This section contains the following topics: ■

About JUNOS Software with Enhanced Services Architecture on page 33

■

About Secure Context and Router Context on page 34

■

JUNOS Software with Enhanced Services Processes on page 35

■

User Interfaces on page 36

■

Summary of JUNOS Software with Enhanced Services Features on page 36

About JUNOS Software with Enhanced Services Architecture JUNOS software with enhanced services implements flow-based security and services with packet-based application of filters, policers, traffic shapers and other classification features.

Flow-Based Forwarding Each packet is processed in the context of its flow state, or session. The first packet in the flow is used to create its state. Decisions made for the first packet of a session are stored and applied to following packets of the same flow. When a packet enters the router, the flow-based Forwarding Engine attempts to match it against an existing session, based on its source and destination IP addresses and ports, its protocol, and its other session information.

Software Overview

■

33


If the packet matches an existing session, it is processed according to that flow's session features, security policies, Network Address Translation (NAT), screens, application layer gateways (ALGs),VPNs, and other features applicable to the flow. If the packet does not match an existing session, the Forwarding Engine creates a new one for it. Because it maintains the state of each flow, the router can enable collaboration among sessions—for example, for conferencing.

Packet-Based Processing The router's flow-based Forwarding Engine is complemented by packet-based forwarding features that are applied at the inbound (ingress) and outbound (egress) interfaces. When a packet arrives at an inbound ingress interface on the router, the flow-based Forwarding Engine determines the outgoing interface for the packet and identifies any policers and stateless filters to be applied to the packet. These features are applied to a packet before the packet is handled by flow processing. Before a packet leaves the router, filters and traffic shapers are applied to it.

About Secure Context and Router Context A Services Router running JUNOS software with enhanced services includes two configuration templates that allow the router to run as either a robust, stateful firewall or a router. A Services Router configured as a firewall is in secure context. When the Services Router is configured as a router, it is in router context. These contexts are meant to be starting points from which you can customize the configuration for your network requirements,

NOTE: By default, the router is configured in secure context. You can change the router to be configured in router context, and if you plan to use the router primarily as a router, then you should make router context your starting point. If you plan to change contexts, you should do so before you configure anything else on your router. If you change contexts after you have configured the router, your configuration is overridden by that of the configuration template for the context. For more information see the JUNOS Software with Enhanced Services Administration Guide. In secure context, packets are forwarded only if there is a security policy defined that permits such traffic. The basic configuration for secure context includes a predefined interface called ge-/0/0/0, which is bound to a preconfigured zone called trust. All other interfaces are bound to a preconfigured untrust zone. The ge-0/0/0 interface is configured to allow for management access with SSH and HTTP services enabled. The following host-inbound services are configured for the ge-0/0/0 interface in the trust zone: HTTP, HTTPS, SSH, Telnet, and DHCP. For the trust zone, TCP RESET is enabled. The default policy for the trust zone allows transmission of traffic from the trust zone to the untrust zone. All traffic within the trust zone is allowed. A screen is applied to a zone to protect against attacks launched from within the zone. The following screens are enabled for the untrust zone: ICMP ping-of-death, IP source route options, IP teardrop, TCP land attack, TCP SYN flood (with the following settings: alarm threshold set to 1024, attack threshold set to 200, source threshold set to 1024, destination threshold set to 2048, a queue size of 2000, and

34

■

Software Overview


a timeout value of 20 seconds). The default policy for the untrust zone is to deny all traffic. In router context, all packets are forwarded unless there is a security policy defined that denies specific traffic. The default policy is to allow all transit traffic, and all interfaces are bound to the trust zone. As with secure context, no security policy is required to allow inbound traffic for an interface from a directly connected device. In router context, you can use any of the supported system services for JUNOS software with enhanced services.

JUNOS Software with Enhanced Services Processes JUNOS software with enhanced services consists of multiple processes that are responsible for individual Services Router functions. Table 16 on page 35 describes the primary JUNOS software with enhanced services processes. Table 16: JUNOS Software with Enhanced Services Processes Process

Name

Description

Management process

mgd

Manages the Services Router system as follows:

Chassis process

chassisd

■

Provides communication between the other processes and an interface to the configuration database

■

Populates the configuration database with configuration information and retrieves the information when queried by other processes to ensure that the system operates as configured

■

Interacts with the other processes when commands are issued through one of the user interfaces on the router

Controls a Services Router chassis and its components as follows: ■

Detects hardware on the system that is used to configure network interfaces

■

Monitors the physical status of hardware components and field-replaceable units (FRUs), detecting when environment sensors such as temperature sensors are triggered

■

Relays signals and interrupts—for example, when devices are taken offline, so that the system can close sessions and shut down gracefully

Routing protocol process

rpd

Defines how routing protocols such as RIP, OSPF, and BGP operate on the router, including selecting routes and maintaining fowarding tables.

Interface process (also called device control process)

dcd

Supplies the programs that configure and monitor network interfaces by defining physical characteristics such as link encapsulation, hold times, and keepalive timers.

Forwarding process

flowd

Forwards packets through the router. The flow-based forwarding process applies filters and policers associated with the ingress interface to packets entering the router. It establishes the state of the packet's session and manages the packet as it transits the security flow and its applicable features. It applies output filtering and traffic shaping to the flow before transmitting the packet out the egress interface.

Software Overview

■

35


Table 16: JUNOS Software with Enhanced Services Processes (continued) Process

Name

Description

Network security process

nsd

Interprets, executes, and manages the configuration of extended interface attributes, policies, zones, address books, firewall screens, Network Address Translation (NAT), and other network security treatments.

Internet Key Exchange process

iked

Implements tunnel management for IPSec VPNs, provides authentication of endpoint entities, and generates keys for packet authentication and encryption.

Firewall authentication process

fwauthd

Implements and manages user authentication configuration, and authenticates users who access the firewall.

Dynamic Host Configuration Protocol process

dhcpd

Implements the DHCP client, allowing the router to obtain IP addresses from the network DHCP server, set other configuration parameters, manage TCP/IP settings propagation, and display client-related information.

User Interfaces The user interfaces on a Services Router interact with the management process to execute commands and store and retrieve information from the configuration database. The user interfaces operate as clients that communicate with the JUNOS software through an application programming interface (API). The following primary user interfaces are shipped with the router: ■

J-Web graphical user interface—Includes quick configuration capabilities for performing the minimum required steps to enable a feature, plus a built-in configuration editor with access to the entire configuration hierarchy to fully configure the router. The J-Web interface also provides tools for monitoring, managing, and diagnosing router operation.

■

Command-line interface (CLI)—Grants access to the complete JUNOS command and configuration hierarchies, to monitor the router, diagnose problems, and configure it completely.

For more information, see “Services Router User Interface Overview” on page 69. Other user interfaces for the Services Router interact with the management process through the common API interface. These interfaces are designed to facilitate the configuration of one or, in some cases, many routers on the network. Among the supported interfaces are the JUNOScope and Session and Resource Control (SRC) applications. For more information about these products, see the JUNOScope Software User Guide and the SRC-PE Getting Started Guide.

Summary of JUNOS Software with Enhanced Services Features JUNOS software with enhanced services running on J-series Services Routers includes the features listed in Table 17 on page 37.

36

■

Software Overview


Table 17: Summary of JUNOS Software with Enhanced Services Features Feature Category

JUNOS Software with Enhanced Services Feature

IP Address Management

Static IPv4 and IPv6 addresses Dynamic Host Configuration Protocol (DHCP)

Internet Protocols

■

DHCP server

■

DHCP client

■

DHCP address pools

■

DHCP relay

■

DHCP static mapping

IPv4 ■

IP options

■

Broadcast Internet Datagrams

IPv6 ■

Routing and forwarding

■

Global address configuration

■

Internet Control Management Protocol (ICMP)

Domain Name System (DNS) ■

Proxy

■

DNS with VPN

■

Dynamic DNS (DDNS)

Software Overview

■

37


Table 17: Summary of JUNOS Software with Enhanced Services Features (continued) Feature Category


Routing Protocols and Multicast

Open Shortest Path First: OSPFv2 and OSPFv3 Border Gateway Protocol: BGP4 and BGP4 extensions for IPv6 Routing Information Protocol: RIPng and RIPv2 Static routes: IPv4 and IPv6 Neighbor Discovery Protocol and Secure Neighbor Discovery Protocol Compressed Real-Time Transport Protocol (CRTP) Intermediate System-to-Intermediate System (IS-IS) Routing over IPSec VPN tunnels Multiple virtual routers (VRs) Multiprotocol Label Switching (MPLS) Multicast ■

Internet Management Protocol (ICMP)

■

Protocol Independent Multicast (PIM)

■

Distance Vector Multicast Routing Protocol (DVMRP)

■

Single-source multicast

■

Multicast Source Discovery Protocol (MSDP)

■

Session Announcement Protocol (SAP) and Session Description Protocol (SDP)

Remote Procedure Call (RPC ALG)

38

■

■

Sun Microsystems RPC Open Network Computing (ONC)

■

Microsoft RPC Distributed Computing Environment (DCE)

Software Overview




Encapsulations

Ethernet ■

Media Access Control (MAC)

■

802.1p tagging

■

Point-to-Point Protocol over Ethernet (PPPoE)

■

Asychronous Transfer Mode (ATM)) for asymmetric digital subscriber line (ADSL) or symmetric high-speed digital subscriber line (SHDSL)

■

Circuit cross-connect (CCC)

■

Transnational cross-connect (TCC)

Synchronous Point-to-Point Protocol (PPP) Frame Relay High-Level Data Link Control (HDLC) Serial encapsulation over RS-232, RS-449, X.21, V.35, and EIA-530 connections 802.1Q filtering and forwarding Multilink Frame Relay (not supported on native serial interfaces) Multilink PPP Generic routing encapsulation (GRE) and IP-over-IP GRE with IP multicast and GRE keepalive packets. (Fragmentation reassembly is not supported.) Traffic Management

Three-level scheduling with weighted round-robin (WRR) Policing and shaping Class-based queuing with prioritization

Software Overview

■

39




Security

Security policies Packet filters Zones User (and administrator) authentication Firewall authentication: passthrough and Web authentication Screens Network Address Translation (NAT) ■

Policy-based NAT-dst (dynamic and static)

■

Static NAT (source and destination))

■

Allow-incoming Table (dynamic NAT-dst and PAT)

■

Interface Source Pool (dynamic NAT-src and PAT)

■

Source Pool with PAT (dynamic NAT-src and PAT)

■

Source Pool without PAT (dynamic NAT-src))

■

Static Source Pool (Static NAT-src)

Application Layer Gateways (ALGs) support, including the following gateways: ■

Internet Inter-ORB Protocol (IIOP)

■

Winframe

■

Session Initiation Protocol (SIP)

■

H.323

■

Media Gateway Control Protocol (MGCP)

■

Skinny Client Control Protocol (SCCP)

■

UNIX remote shell services

■

File Transfer Protocol (FTP)

■

Real-Time Streaming Protocol (RTSP)

■

Trivial File Transfer Protocol (TFTP)

■

SQLNET

■

Domain Name System (DNS)

■

Internet Control Message Protocol (ICMP)

■

TALK

■

NetShow

■

Simple Network Management Protocol-GET (SNMP-GET)

Compressed Real-Time Transport Protocol (CRTP) Jumbo Frame Support

40

■

Software Overview




IPSec VPNs

Policy-based and route-based IPSec VPNs Internet Key Exchange (IKE) key and manual key management IPSec peer types: ■

Peers with static IP addresses

■

Peers with dynamic IP addresses (dynamic endpoint site-to-site IPSec VPNs)

■

Remote access by means of user IKE peers and user-group IKE peers (remote access IPSec VPNs)

IKE authentication preshared keys and certificates with the following features: ■

Certificate encodings: X509 and PKCS7

■

RSA signatures

Advanced Encryption Standard (AES) 128-bit, 192-bit, and 256-bit encryption 56-bit Data Encryption Standard (DES) and 168-bit 3DES encryption MD5 and Secure Hash Algorithm (SHA-1) authentication. (For IPSec IKE Phase 2, SHA-2 is also supported.) Antireplay (replay attack prevention) Next-hop tunnel binding

System Management

JUNOScript XML application programming interface (API) J-Web browser interface—for Services Router configuration and management JUNOS command-line interface (CLI)—for Services Router configuration and management through the console, Telnet, SSH, or J-Web CLI terminal Simple Network Management Protocol: SNMPv1 and SNMPv2 J-Flow flow monitoring and accounting Packet capture (PCAP)

Traffic Analysis

Real-time performance monitoring (RPM) J-Web event viewer

Activity Logging and Monitoring

Traceroute System log RADIUS external administrator database support

Software Overview

■

41




Administration

Configuration rollback Autoinstallation Button-operated configuration rescue (CONFIG) Confirmation of configuration changes Software upgrades Supports the following features for automating network operations and troubleshooting:

Class of Service

42

■

■

Commit scripts

■

Operation scripts

■

Event policies

■

DiffServ

■

Classification

■

Traffic marking

■

Scheduling

■

Policing and shaping

■

Intelligent drop mechanisms

■

Link efficiency mechanism

■

Policy management

■

Queuing for GRE and IP-IP tunnels

Software Overview

Chapter 3

PIM Overview J-series Services Routers accept Physical Interface Modules (PIMs) in the slots on the front of the chassis.

CAUTION: PIMs are not hot-swappable. You must power off the Services Router before removing or inserting a PIM module. Ensure that the PIMs are installed in the router chassis before booting up the system. A Physical Interface Module (PIM) is a network interface card that is installed on a J-series Services Router to provide physical connections to a LAN or a WAN. The PIM receives incoming packets from the network and transmits outgoing packets to the network. Each PIM is equipped with a dedicated network processor that forwards incoming data packets to the Routing Engine and receives outgoing data packets from the Routing Engine. During this process, the PIM performs framing and line-speed signaling for its medium type. For a complete list of supported PIMs, see “Field-Replaceable PIMs” on page 46. A single WXC Integrated Services Module (also called an ISM 200) can be installed like a PIM in J2350, J4350, and J6350 routers to provide WAN acceleration. For more information, see the WXC Integrated Services Module Installation and Configuration Guide. For J-series Services Router PIM compatibility matrix and datasheets, go to http://www.juniper.net/products/jseries/. For information about network interfaces, and for configuration instructions, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide. This chapter contains the following topics: ■

PIM Terms on page 43

■

Field-Replaceable PIMs on page 46

PIM Terms To understand PIM, become familiar with the terms defined in Table 18 on page 44.

PIM Terms

■

43


Table 18: PIM Terms Term

Definition

ADSL 2/2+ Annex A

ITU-T Standard G.992.1 that defines how ADSL works over plain old telephone service (POTS) lines.

ADSL 2/2+ Annex B

ITU-T Standard G.992.1 that defines how ADSL works over Integrated Services Digital Network (ISDN) lines.

bandwidth on demand

ISDN cost-control feature defining the bandwidth threshold that must be reached on all links before a Services Router initiates additional ISDN data connections to provide more bandwidth.

Basic Rate Interface (BRI)

ISDN interface intended for home and small enterprise applications. BRI consists of two 64-Kbps B-channels and one 16-Kbps D-channel.

callback

Alternative feature to dial-in that enables a J-series Services Router to call back the caller from the remote end of a backup ISDN connection. Instead of accepting a call from the remote end of the connection, the router rejects the call, waits a configured period of time, and calls a number configured on the router's dialer interface. See also dial-in.

caller ID

Telephone number of the caller on the remote end of a backup ISDN connection, used to dial in and also to identify the caller. Multiple caller IDs can be configured on an ISDN dialer interface. During dial-in, the router matches the incoming call's caller ID against the caller IDs configured on its dialer interfaces. Each dialer interface accepts calls from only callers whose caller IDs are configured on it.

channel service unit (CSU)

Unit that connects a digital telephone line to a multiplexer or other signal service.

data service unit (DSU)

Unit that connects a data terminal equipment (DTE) device—in this case, a Services Router—to a digital telephone line.

data terminal equipment–to–data communication equipment (DTE–DCE) interface

Interface that a Services Router (the DTE) uses to exchange information with a serial device such as a modem (the DCE).

demand circuit

Interface configured for dial-on-demand routing backup. In OSPF, the demand circuit reduces the amount of OSPF traffic by removing all OSPF protocols when the routing domain is in a steady state.

dial backup

Feature that reestablishes network connectivity through one or more backup ISDN dialer interfaces after a primary interface fails. When the primary interface is reestablished, the ISDN interface is disconnected.

dial-in

Feature that enables J-series Services Routers to receive calls from the remote end of a backup ISDN connection. The remote end of the ISDN call might be a service provider, a corporate central location, or a customer premises equipment (CPE) branch office. All incoming calls can be verified against caller IDs configured on the router's dialer interface. See also callback.

44

■

PIM Terms

A DTE cable uses a male 9-pin or 25-pin connector, and a DCE cable uses a female 9-pin or 25-pin connector.

Chapter 3: PIM Overview

Table 18: PIM Terms (continued) Term

Definition

dialer filter

Stateless firewall filter that enables dial-on-demand routing backup when applied to a physical ISDN interface and its dialer interface configured as a passive static route. The passive static route has a lower priority than dynamic routes. If all dynamic routes to an address are lost from the routing table and the router receives a packet for that address, the dialer interface initiates an ISDN backup connection and sends the packet over it. See also dial-on-demand routing backup; floating static route.

dial-on-demand-routing (DDR) backup

Feature that provides a J-series Services Router with full-time connectivity across an ISDN line. When routes on a primary serial T1, E1, T3, E3, Fast Ethernet, or PPPoE interface are lost, an ISDN dialer interface establishes a backup connection. To save connection time costs, the Services Router drops the ISDN connection after a configured period of inactivity. Services Router with ISDN interfaces support two types of dial-on-demand routing backup: on-demand routing with a dialer filter and dialer watch. See also dialer filter; dialer watch.

dialer watch

Dial-on-demand routing (DDR) backup feature that provides reliable connectivity without relying on a dialer filter to activate the ISDN interface. The ISDN dialer interface monitors the existence of each route on a watch list. If all routes on the watch list are lost from the routing table, dialer watch initiates the ISDN interface for failover connectivity. See also dial-on-demand routing backup.

“dying gasp” notification

Ability of a Services Router with a digital subscriber line (DSL) connection that has lost power to send a message informing the attached DSL access multiplexer (DSLAM) that it is about to go offline.

ePIM

Enhanced PIM. A particular type of high-speed PIM, such as the Gigabit Ethernet ePIM or 4-port Fast Ethernet ePIM, which can be inserted only in high-speed slots (slots 3 and 6 on a J4350 Services Router, or slots 2, 3, 5, and 6 on a J6350 Services Router).

floating static route

Route with an administrative distance greater than the administrative distance of the dynamically learned versions of the same route. The static route is used only when the dynamic routes are no longer available. When a floating static route is configured on an interface with a dialer filter, the interface can be used for backup.

ISDN S/T interface

Interface between an ISDN network and a network termination device consisting of two twisted pairs, one each for transmitting and receiving. The S/T interface usually resides in the customer premises and operates at 192 Kbps, of which ISDN traffic accounts for 144 Kbps.

ISDN U interface

Single twisted–pair interface line connecting the customer premises unit in an ISDN network to the central office. A U interface runs at 144 Kbps (128 Kbps for two B channels and 16 Kbps for the D channel).

plain old telephone service (POTS)

Standard telephone service that allows limited speed and bandwidth of 52 Kbps, which is also know as public switched telephone network (PSTN).

Primary Rate Interface (PRI)

ISDN service intended for higher-bandwidth applications than ISDN BRI. ISDN PRI consists of a single D-channel for control and signaling, plus a number of 64-Kbps B-channels—either 23 B-channels on a T1 line or 30 B-channels on an E1 line—to carry network traffic.

uPIM

Universal switching PIM. A particular type of PIM, such as the Gigabit Ethernet uPIM, which can be universally inserted in any slot on a J2320, J2350, J4350, or J6350 Services Router.

PIM Terms

■

45


Field-Replaceable PIMs PIMs are removable and insertable only when the Services Router is powered off. You install PIMs into slots in the router chassis. If a slot is not occupied by a PIM, a PIM blank panel must be installed to shield the empty slot and to allow cooling air to circulate properly through the router. This section contains the following topics: ■

J2320 and J2350 Field-Replaceable PIM and Module Summary on page 46

■

J4350 and J6350 Field-Replaceable PIM Summary on page 47

■

1-Port, 6-Port, 8-Port, and 16-Port Gigabit Ethernet uPIMs on page 49

■

1-Port Gigabit Ethernet ePIMs on page 52

■

Dual-Port Serial PIM on page 55

■

Dual-Port T1 or E1 PIM on page 56

■

Dual-Port Channelized T1/E1/ISDN PRI PIM on page 57

■

T3 or E3 PIM on page 59

■

Dual-Port Fast Ethernet PIM on page 61

■

4-Port Fast Ethernet ePIM on page 62

■

4-Port ISDN BRI PIMs on page 63

■

ADSL PIM on page 64

■

G.SHDSL PIM on page 66

J2320 and J2350 Field-Replaceable PIM and Module Summary Table 19 on page 47 provides software release information, port numbers, and sample interface names for the field-replaceable PIMs and modules supported on J2320 and J2350 Services Routers. For interface naming conventions, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide. The supported PIMs can be installed in any slot available on the J2320 and J2350 routers. The WXC Integrated Services Module supported on the J2350 model occupies two slots. You can install only one of these modules in a router chassis.

CAUTION: Do not install a combination of modules in a single chassis that exceeds the maximum power and heat capacity of the chassis. If J-series power management is enabled, PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) that exceed the maximum power and heat capacity remain offline when the chassis is powered on. To verify that the combination of modules to be installed in a chassis does not exceed the power and heat capacities for the router, see “Planning for Power Management” on page 98.

46

■

Field-Replaceable PIMs


Table 19: J2320 and J2350 Field-Replaceable PIM and Module Summary Sample Interface Name PIM

Supported Software Releases for This PIM

1-Port SFP, 6-Port SFP, 8-Port, and 16-Port Gigabit Ethernet uPIMs

Release 8.5 and later of JUNOS software with enhanced services

Port Numbering

(type-pim/0/port)

Ports:

ge-2/0/0

■

0

■

0 through 5

■

0 through 7

■

0 through 15



Ports—0 and 1

se-3/0/1

Dual-Port T1 or E1 PIM


Ports—0 and 1

t1-0/0/1

or e1-0/0/1



Ports—0 and 1

4-Port ISDN BRI PIM


Ports—0, 1, 2, and 3

br-1/0/2

ADSL PIM


Port—0

at-2/0/0

G.SHDSL PIM


Ports—0 and 1

at-1/0/0

WXC Integrated Services Module (ISM 200)


Ports—0

wx-1/0/0

ct1-0/0/0 ce1-0/0/0

NOTE: This module is not supported on J2320 routers.

J4350 and J6350 Field-Replaceable PIM Summary Table 20 on page 48 provides software release information, slot and port numbers, and sample interface names for the field-replaceable PIMs supported on J4350 and J6350 Services Routers.


■

47


CAUTION: Do not install a combination of modules in a single chassis that exceeds the maximum power and heat capacity of the chassis. If J-series power management is enabled, PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) that exceed the maximum power and heat capacity remain offline when the chassis is powered on. To verify that the combination of PIMs to be installed in a chassis does not exceed the power and heat capacities for the J4350 or J6350 router, see “Planning for Power Management” on page 98. Table 20: J4350 and J6350 Field-Replaceable PIM and Module Summary Sample Interface Name Supported Software Releases for This PIM

PIM 1-Port SFP Gigabit Ethernet uPIM

6-Port SFP Gigabit Ethernet uPIM

8-Port Gigabit Ethernet uPIM


1-Port SFP Gigabit Ethernet ePIM

Slot and Port Numbering

(type-pim/0/port)


Slots—1 through 6

ge-2/0/0


Slots—1 through 6


Slots—1 through 6


Slots—1 through 6


Can be installed in any high-speed slot, as follows:

Port—0 ge-2/0/5

Ports—0 through 5 ge-2/0/7

Ports—0 through 7 ge-2/0/15

Ports—0 through 15

■

ge-3/0/0

J4350: Slots 3 and 6 Port—0

■

J6350: Slots 2, 3, 5, and 6 Port—0


Dual-Port T1 or E1 PIM


Slots—1 through 6


Slots—1 through 6

t1-0/0/1

Ports—0 and 1

or

se-3/0/1

Ports—0 and 1

e1-0/0/1


48

■



Slots—1 through 6

ct1-0/0/0

Port—0 and 1

ce1-0/0/0


Table 20: J4350 and J6350 Field-Replaceable PIM and Module Summary (continued) Sample Interface Name PIM T3 or E3 PIM

Supported Software Releases for This PIM Release 8.5 and later of JUNOS software with enhanced services

Slot and Port Numbering

(type-pim/0/port)

Slots—1 through 6

t3-0/0/0

Port—0

or e3-2/0/0


4-port Fast Ethernet ePIM PIM


Slots—1 through 6


Can be installed in any high-speed slot, as follows:

fe-1/0/0

Ports—0 and 1

■

fe-3/0/0

J4350: Slots 3 and 6 Ports—0 through 3

■

J6350: Slots 2, 3, 5, and 6 Ports—0 through 3

4-Port ISDN BRI PIM

ADSL PIM

G.SHDSL PIM

WXC Integrated Services Module (ISM 200)


Slots—1 through 6


Slots—1 through 6


Slots—1 through 6


Ports—0

br-1/0/2

Ports—0, 1, 2, and 3 at-2/0/0

Port—0 at-1/0/0

Ports—0 and 1 wx-1/0/0

1-Port, 6-Port, 8-Port, and 16-Port Gigabit Ethernet uPIMs Gigabit Ethernet uPIMs are supported on J2320, J2350, J4350, and J6350 Services Routers. Gigabit Ethernet uPIMs are available in four versions. The 1-port and 6-port SFP Gigabit Ethernet uPIM, shown in Figure 22 on page 50 and Figure 23 on page 50, have small form-factor pluggable (SFP) transceivers to allow you to use different connectors. The optical SFP transceivers supported by these uPIMs are described in Table 22 on page 52.


■

49


Figure 22: 1-Port Gigabit Ethernet uPIM


The 8-port and 16-port Gigabit Ethernet uPIMs, shown in Figure 24 on page 50 and Figure 25 on page 50, have RJ-45 connectors. Figure 24: 8-Port Gigabit Ethernet uPIM


50

■



Features. Gigabit Ethernet uPIMs provide the following key features: ■

The multiport uPIMs can be used as switches in the access layer (for connections to workstations and desktops). For more information, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

■

Link speed for 8-port and 16-port Gigabit Ethernet uPIMs is configurable to 10, 100, or 1000 Mbps, and transmission mode is configurable to half or full duplex. The 1-port and 6-port SFP Gigabit Ethernet uPIMs cannot be manually configured—they are set at 1000 Mbps and full duplex.

■

Autonegotiation.

■

1-port and 6-port Gigabit Ethernet uPIMs use SFP transceivers to allow different connectors to be used on uPIM ports. These SFP Gigabit Ethernet uPIMs support 1000Base-SX, 1000Base-LX, and 1000Base-T SFPs. They do not support 1000Base-LH SFPs. 1000Base-SX and 1000Base-LX SFP transceivers have the following characteristics:

■

■

Duplex LC/PC connector (Rx and Tx).

■

Optical interface support—See the JUNOS Software with Enhanced Services Administration Guide.

8-port and 16-port Gigabit Ethernet uPIMs—and SFPs on the 1-port and 6-port uPIMs—support 1000Base-T RJ-45 connectors. For pinouts of cable connectors for Gigabit Ethernet uPIMs, see “Gigabit Ethernet uPIM RJ-45 Connector Pinout” on page 225.

Limitations. Gigabit Ethernet uPIMs have the following limitations: ■

Gigabit Ethernet uPIMs do not support SNMP.

■

Gigabit Ethernet uPIM interfaces can be configured up to a maximum MTU size of 9014 bytes.

Installation. Gigabit Ethernet uPIMs can be inserted in any slot on J2320, J2350, J4350, or J6350 Services Routers. Throughput for a uPIM is higher when it is inserted in a high-speed slot. High-speed slots are slots 3 and 6 on the J4350 router, and slots 2, 3, 5, and 6 on the J6350 router. 16-port Gigabit Ethernet uPIMs are two slots high. Because the connector on the PIM is on the lower half, the PIM occupies the slot that it is plugged into and the slot above it. Thus you cannot install a 16-port uPIM in the top slots of a router. For example, on a J4350 router you cannot install a 16-port uPIM in slots 1 and 4. If you install the PIM in slot 2, it occupies both slots 2 and 1. To install or remove a PIM, see “Replacing a PIM” on page 162. Interface LEDs. For 8-port and 16-port Gigabit Ethernet uPIMs, the activity LED is located on the left side of each port, and the link LED is located on the right side of each port. For the 6-port Gigabit Ethernet uPIM, the LEDs are located to the right of


■

51


each port, with the link LED above the activity LED. LEDs on the 1-port uPIM are clearly labeled.Table 21 on page 52 describes the meaning of the LEDs. Table 21: Gigabit Ethernet Port LEDs Function

Color

State

Description

Link

Green

On steadily

Port is online.

Unlit

Off

Port is offline.

Green

Blinking

Port is transmitting or receiving traffic.

Unlit

Off

Port might be online, but it is not receiving traffic.

Activity (TX/RX)

For alarms, see the configuring and monitoring alarms information in the JUNOS Software with Enhanced Services Administration Guide. Optical Interface Support. Table 22 on page 52 describes the optical interface support on the 1-port and 6-port Gigabit Ethernet uPIMs over single-mode fiber-optic (SMF) and multimode fiber-optic (MMF) cables. Table 22: Optical Interface Support for SFP Gigabit Ethernet uPIMs Parameter

1000Base-SX Transceiver

1000Base-LX Transceiver

Model number

JX-SFP-1GE-SX

JX-SFP-1GE-LX

Maximum distance

500 m (1640 ft) on 50/125-µm MMF cable

10 km (6.2 mi) on 9/125-µm SMF cable

200 m (656 ft) on 62.5/125-µm MMF cable

550 m (1894 ft) on MMF cable

Transmitter wavelength

830 nm through 860 nm


Average launch power

–9.5 dBm through –4 dBm

For SMF cable: –9.5 dBm through –3 dBm For MMF cable: –11.5 dBm through –3 dBm

Receiver sensitivity

–21 dBm through –18 dBm

–25 dBm through –20.5 dBm

Copper Interface Support. The 1-port and 6-port Gigabit Ethernet uPIMs also support 1000Base-T SFPs (model number JX-SFP-1GE-T).

1-Port Gigabit Ethernet ePIMs The 1-port Gigabit Ethernet ePIM is supported on J4350 and J6350 Services Routers and is available in two versions, one with copper connector (see

52

■



Figure 26 on page 53), the other with small form-factor pluggable (SFP) transceivers (see Figure 27 on page 53). Figure 26: Copper Gigabit Ethernet ePIM

Figure 27: SFP Gigabit Ethernet ePIM

Features. The Gigabit Ethernet ePIM provides the following key features: ■

Autonegotiation through medium-dependent interface (MDI) and MDI crossover (MDI-X) support.

■

Link speeds for the Copper Gigabit Ethernet ePIM are configurable to 10, 100, or 1000 Mbps, and transmission mode is configurable to half or full duplex. The SFP Gigabit Ethernet ePIM cannot be manually configured—it is set at 1000 Mbps and full duplex.

■

The SFP Gigabit Ethernet ePIM uses SFPs to allow different connectors to be used on the ePIM ports. The ePIM supports 1000Base-SX, 1000Base-LX, and 1000Base-T copper SFPs. It does not support 1000Base-LH SFPs. 1000Base-SX and 1000Base-LX SFP transceivers have the following characteristics:

■

■

Duplex LC/PC connector (Rx and Tx).

■

Optical interface support—See Table 24 on page 55.

Copper Gigabit Ethernet ePIM and 1000Base-T SFP transceivers have the following characteristics: ■

Connector: Four-pair, category 5 unshielded twisted-pair cable through an RJ-45 connector

■

Pinout: MDI crossover


■

53


■

Maximum distance: 100 m (328 ft)

For pinouts of cable connectors for Copper Gigabit Ethernet ePIMs, see “Gigabit Ethernet ePIM RJ-45 Connector Pinout” on page 226. Limitations. The Gigabit Ethernet ePIM has the following limitations: ■

Gigabit Ethernet ePIMs do not support SNMP.

■

Configure Gigabit Ethernet ePIM interfaces up to a maximum MTU size of 9018 bytes.

Installation. You can install Gigabit Ethernet ePIMs in any high-speed slot as follows: ■

J4350—Install up to two Gigabit Ethernet ePIMs in slots 3 and 6.

■

J6350—Install up to four Gigabit Ethernet ePIMs in slots 2, 3, 5, and 6.

NOTE: High-speed slots are labeled with an E on the front-panel slot number diagram. To install or remove a PIM, see “Replacing a PIM” on page 162. Interface LEDs. The LINK and TX/RX LEDs indicate link status and activity. Table 23 on page 54 describes the meaning of the LEDs. Table 23: Gigabit Ethernet Port LEDs Function

Color

State

Description

LINK

Green

On steadily

Port is online.

Unlit

Off

Port is offline.

Green

Blinking

Port is transmitting or receiving traffic.

Unlit

Off

Port might be online, but it is not receiving traffic.

TX/RX

For alarms, see the configuring and monitoring alarms information in the JUNOS Software with Enhanced Services Administration Guide. Optical Interface Support. Table 24 on page 55 describes the optical interface support on the SFP Gigabit Ethernet ePIM over single-mode fiber-optic (SMF) and multimode fiber-optic (MMF) cables.

54

■



Table 24: Optical Interface Support for SFP Gigabit Ethernet ePIM Parameter

1000Base-SX Transceiver

1000Base-LX Transceiver

Maximum distance

500 m (1640 ft) on 50/125-µm MMF cable

10 km (6.2 mi) on 9/125-µm SMF cable

200 m (656 ft) on 62.5/125-µm MMF cable

550 m (1894 ft) on MMF cable

Transmitter wavelength



Average launch power

–9.5 dBm through –4 dBm

For SMF cable: –9.5 dBm through –3 dBm For MMF cable: –11.5 dBm through –3 dBm

Receiver saturation

–3 dBm

–3 dBm

Receiver sensitivity

–18 dBm

–20.5 dBm

Dual-Port Serial PIM The Dual-Port Serial PIM (Figure 28 on page 55) provides a physical connection to serial network media types through two serial interface ports. Figure 28: Dual-Port Serial PIM

The Dual-Port Serial PIM provides the following key features: ■

Onboard network processor

■

Autoselection of operation modes based on data terminal equipment (DTE) or data communication equipment (DCE) cables

■

Local and remote loopback diagnostics

■

Configurable clock rate for the transmit (Tx) clock and receive (Rx) clock

For pinouts of cable connectors for serial PIMs, see “Serial PIM Cable Specifications” on page 215. To install or remove a PIM, see “Replacing a PIM” on page 162.


■

55


Status LEDs indicate port status. Table 25 on page 56 describes the meaning of the LED states. Table 25: Status LEDs for Serial Ports Color

State

Description

Green

On steadily

Online with no alarms or failures.

Red

On steadily

Active with a local alarm. The router has detected a failure.

Unlit

Off

Offline.

For alarms, see the configuring and monitoring alarms information in the JUNOS Software with Enhanced Services Administration Guide.

Dual-Port T1 or E1 PIM The Dual-Port T1 PIM (Figure 29 on page 56) and Dual-Port E1 PIM (Figure 30 on page 56) provide a physical connection to T1 or E1 network media types. Each PIM has two physical T1 or E1 ports with an integrated channel service unit (CSU) or data service unit (DSU). Figure 29: Dual-Port T1 PIM

Figure 30: Dual-Port E1 PIM

The Dual-Port T1 and E1 PIMs provides the following key features:

56

■

■


■

Integrated CSU/DSU—Eliminates the need for a separate external device



■

56-Kbps and 64-Kbps modes

■

ANSI T1.102, T1.107, and T1.403 standards compliance

■

G.703, G.704, and G.706 E1 standards compliance

■

Independent internal and external clocking system

■

Loopback, bit error rate test (BERT), T1 facilities data link (FDL), and long buildout diagnostics

For pinouts of cable connectors for T1 and E1 PIMs, see “E1 and T1 RJ-48 Cable Pinouts” on page 227. To install or remove a PIM, see “Replacing a PIM” on page 162. Status LEDs indicate port status. Table 26 on page 57 describes the meaning of the LED states. Table 26: Status LEDs for T1 and E1 Ports Color

State

Description

Green

On steadily


Red

On steadily


Unlit

Off

Offline.


Dual-Port Channelized T1/E1/ISDN PRI PIM The Dual-Port Channelized T1/E1/ISDN PRI PIM (Figure 31 on page 58) is a multiflex interface card that allows you to configure a single interface as a channelized T1 interface or a channelized E1 interface. You can also configure ISDN PRI services on a channelized T1 or E1 interface. The channelized T1/E1/ISDN PRI interface supports up to 24 DS0 channels on a T1 interface and up to 31 DS0 channels on an E1 interface, in addition to supporting the features of regular (unchannelized) T1 and E1 PIMs. Each interface can be configured as a single clear-channel, fractionalized, or channelized interface.

NOTE: You cannot configure a channelized T1/E1/ISDN PRI interface through a J-Web Quick Configuration page.


■

57


Figure 31: Channelized T1/E1/ISDN PRI PIM

The Dual-Port Channelized T1/E1/ISDN PRI PIM provides the following key features: ■


■

Two-port channelization

■

Interfaces that are software configurable as T1 or E1 channels or ISDN PRI B-channels

■

Clear-channel, fractional, and channelized operation

■

Lower latency due to the addition of a Freescale processor

■

Maximum MTU value of 4500 bytes (for channelized T1 or E1 interface) and 4098 bytes (for ISDN PRI services)

NOTE: For a clear-channel T1 or E1 interface, the maximum MTU is 9150 bytes.

■

56-Kbps and 64-Kbps modes

■

ANSI T1.102, T1.107, and T1.403 standards compliance

■

G.703, G.704, and G.706 E1 standards compliance

■


■

Loopback, bit error rate test (BERT), T1 facilities data link (FDL), and long buildout diagnostics

For pinouts of cable connectors for channelized T1/E1/ISDN PRI PIMs, see “ISDN RJ-45 Connector Pinout” on page 231. To install or remove a PIM, see “Replacing a PIM” on page 162. Channelized T1/E1/ISDN PRI LEDs indicate PIM and port status. Table 27 on page 59 describes the meaning of the LED states.

NOTE: The STATUS LED displays channelized T1 or E1 port activity and alarms only. It does not display ISDN PRI B-channel or D-channel status.

58

■



Table 27: LEDs for Channelized T1/E1/ISDN PRI PIMs Label

Color

State

Description

ONLINE

Green

On steadily

PIM is online and operational.

Unlit

Off

PIM is not online.

Green

On steadily

Port is online with no alarms or failures, and the physical layer is active.

Red

Online

Port is active with a local alarm. The router has detected a failure and the physical layer is inactive.

Yellow

Online

Port is online with alarms for remote failures.

Unlit

Offline

Port is disabled.

STATUS


T3 or E3 PIM The T3 (also known as DS3) PIM (Figure 32 on page 59) and E3 PIM (Figure 33 on page 60) provide a physical connection to T3 or E3 network media types. The T3 and E3 PIMs include one physical T3 or E3 port with an integrated data service unit (DSU). Figure 32: T3 PIM


■

59


Figure 33: E3 PIM

The T3 and E3 PIMs provide the following key features: ■


■

Integrated DSU—Eliminates the need for a separate external device

■

Subrate and scrambling options with support for major DSU vendors

■


■

Loopback (payload–supported only on T3 PIM, local, and remote), bit error rate test (BERT), and T3 far-end alarm and control (FEAC) diagnostics

For pinouts of cable connectors for T3 and E3 PIMs, see “E3 and T3 BNC Connector Pinout” on page 230. To install or remove a PIM, see “Replacing a PIM” on page 162. Status LEDs indicate port status. Table 28 on page 60 describes the meaning of the LED states. Table 28: Status LEDs for T3 and E3 Ports Color

State

Description

Green

On steadily


Red

On steadily


Yellow

On steadily

■

Loopback mode.

■

T3 (DS3)—Remote endpoint is in red alarm failure.

■

E3—Remote defect indication (RDI).

Unlit

Off

Offline.


60

■



Dual-Port Fast Ethernet PIM The Dual-Port 10/100-Mbps Fast Ethernet PIM (Figure 34 on page 61) has two physical Fast Ethernet ports. Figure 34: Fast Ethernet PIM

The Dual-Port Fast Ethernet PIM provides the following key features: ■


■

Full-duplex and half-duplex modes

■

Media access control (MAC) address filtering

■

Autonegotiation through medium-dependent interface (MDI) and MDI crossover (MDI–X) support

For pinouts of cable connectors for Fast Ethernet PIMs, see “Fast Ethernet RJ-45 Connector Pinout” on page 225. To install or remove a PIM, see “Replacing a PIM” on page 162. Fast Ethernet LEDs indicate link status, port speed, and activity. Table 29 on page 61 describes the meaning of the LEDs. Table 29: LEDs for Dual-Port Fast Ethernet PIM Label

Color

State

Description

LINK/SPEED

Green (100 Mbps)

On steadily

Online and link is active.

Red

Disconnected

Link is unavailable.

Green

Blinking

Online with network traffic.

Green

On steadily

Online without traffic.

Yellow (10 Mbps)

ACTIVITY



■

61


4-Port Fast Ethernet ePIM You can install 4-Port Fast Ethernet ePIMs in any of the high-speed slots, as follows: ■

J4350—Install up to two 4-Port Fast Ethernet ePIMs in slots 3 and 6.

■

J6350—Install up to four 4-Port Fast Ethernet ePIMs in slots 2, 3, 5, and 6.

NOTE: For 4-port Fast Ethernet ePIMs, if you apply a CoS scheduler map on outgoing (egress) traffic, the router does not divide the bandwidth appropriately among the CoS queues. As a workaround, configure enforced CoS shaping on the ports. The 4-Port 10/100-Mbps Fast Ethernet ePIM, shown in Figure 35 on page 62, has four physical Fast Ethernet ports. Figure 35: 4-Port Fast Ethernet ePIM

The 4-Port Fast Ethernet ePIM provides the following key features: ■

Full-duplex and half-duplex modes.

■

Autonegotiation through medium-dependent interface (MDI) and MDI crossover (MDI–X) support.

For pinouts of cable connectors for Fast Ethernet ePIMs, see “Fast Ethernet RJ-45 Connector Pinout” on page 225.

NOTE: 4-port Fast Ethernet ePIMs support a maximum frame size of 1514 bytes. Jumbo frames are not supported. For information about installing and removing a PIM, see “Replacing a PIM” on page 162. Fast Ethernet LEDs indicate link status and activity. Table 30 on page 63 describes the meaning of the LEDs.

62

■



Table 30: LEDs for 4-Port Fast Ethernet ePIM Label

Color

State

Description

Link status (upper left)

Green

On steadily

Port is online.

Unlit

Off

Port is offline.

Green

Blinking


Unlit

Off

Port might be online, but it is not transmitting or receiving data.

Link activity (upper right)


4-Port ISDN BRI PIMs The 4-port ISDN BRI PIMs have four physical ports that support the ISDN BRI S/T (Figure 36 on page 63) or ISDN BRI U (Figure 37 on page 63) interface type. Figure 36: ISDN BRI S/T PIM

Figure 37: ISDN BRI U PIM

ISDN BRI PIMs provide the following key features: ■


■

Bandwidth on demand


■

63


■

Dial backup

■

Dial-on-demand routing backup (floating static and dialer watch)

For pinouts of cable connectors for ISDN PIMs, see “ISDN RJ-45 Connector Pinout” on page 231. To install or remove a PIM, see “Replacing a PIM” on page 162. ISDN LEDs indicate PIM and port status. Table 31 on page 64 describes the meaning of the LED states. Table 31: LEDs for ISDN BRI S/T and U PIMs Label

Color

State

Description

ONLINE

Green

Blinking

Call setup is successful on either the B1 or B2 channel.

Green

On steadily

ISDN Layer 2 is active.

Amber

On steadily

■

ISDN Layer 1 is active.

■

ISDN Layer 2 is unavailable.

■

BRI interface port is not connected.

■

ISDN Layer 1 is unavailable.

Red

STATUS

Disconnected

Unlit

Off

BRI interface is offline.

Green

On steadily

PIM is online and operational.

Red

Disconnected

PIM is not operational and needs replacement.

Unlit

Off

PIM is offline.


ADSL PIM The ADSL PIM provides a single physical interface to asymmetric digital subscriber line (ADSL) network media types. The ADSL PIM, one supporting Annex A (Figure 38 on page 65) over plain old telephone service (POTS) and the other Annex B (Figure 39 on page 65) over ISDN, includes one physical ADSL port for an ATM-over-ADSL connection.

64

■



Figure 38: ADSL 2/2+ Annex A PIM

Figure 39: ADSL 2/2+ Annex B PIM

The ADSL PIM provides the following key features: ■


■

ADSL, ADSL2, and ADSL2+ protocols on the same PIM

■

“Dying gasp” notification

■

Asynchronous Transfer Mode (ATM) Adaptation Layer 5 (AAL5) encapsulation

For pinouts of cable connectors for ADSL PIMs, see “ADSL and G.SHDSL RJ-11 Connector Pinout” on page 230. To install or remove a PIM, see “Replacing a PIM” on page 162. The ADSL PIMs have two LEDs to indicate the status of the PIM and its port. Table 32 on page 65 describes the meaning of the LED states. Table 32: LEDs for ADSL PIMs Label

Color

State

Description

ONLINE

Green

On steadily

PIM passed the self-test and is online and operational.

Unlit

Off

PIM is offline.

Green

On steadily


Red

On steadily

Active with local or remote alarms. The router has detected a failure.

STATUS


■

65



G.SHDSL PIM The G.SHDSL PIM (Figure 40 on page 66) provides symmetric high-speed digital subscriber line (SHDSL) physical interfaces to ATM network media types. The G.SHDSL PIM has two ports for ATM-over-SHDSL connections. Figure 40: G.SHDSL PIM

The G.SHDSL PIM supports the following key features: ■


■

2-port two-wire mode and 1-port four-wire mode

■

Programmable line rates in both modes: ■

2-port two-wire mode supports autodetection of line rate and fixed line rates from 192 Kbps to 2.304 Mbps in 64-Kbps increments.

■

1-port four-wire mode supports fixed line rates from 384 Kbps to 4.608 Mbps in 128-Kbps increments.

■

32 virtual channels per PIM

■

ATM-over-G.SHDSL framing

■

“Dying gasp” notification

■

Local and remote loopback diagnostics

■

ITU-T G.991.2, ITU-T G.994.1, and ITU-T G.997.1 standards compliance

NOTE: Payload loopback functionality is not supported on ATM-over-SHDSL interfaces. For pinouts of cable connectors for G.SHDSL PIMs, see “ADSL and G.SHDSL RJ-11 Connector Pinout” on page 230. To install or remove a PIM, see “Replacing a PIM” on page 162. The G.SHDSL PIM has two LEDs to indicate the status of the PIM and its ports. Table 33 on page 67 describes the meaning of the LED states.

66

■



Table 33: LEDs for G.SHDSL PIMs Label

Color

State

Description

ONLINE

Green

On steadily


Red

Disconnected

Initialization of the PIM has failed.

Unlit

Off

PIM is booting.

Green

On steadily


Red

On steadily


STATUS



■

67


68

■


Chapter 4

Services Router User Interface Overview You can use two user interfaces to monitor, configure, troubleshoot, and manage a Services Router—the J-Web interface and the command-line interface (CLI) for JUNOS software with enhanced services. This chapter contains the following topics: ■

User Interface Overview on page 69

■

Before You Begin on page 71

■

Using the J-Web Interface on page 71

■

Using the Command-Line Interface on page 77

User Interface Overview This section contains the following topics: ■

J-Web Overview on page 69

■

CLI Overview on page 70

You can operate the router either in secure or router context. With the J-Web interface and the command-line interface (CLI), you configure the routing protocols that run on the router, and the router security features, including stateful firewall policies, Network Address Translation (NAT) attack prevention screens, Application Layer Gateways (ALGs), and IPSec VPNs. You also set the properties of its network interfaces. After activating a software configuration, you can use either user interface to monitor the system and the protocol traffic passing through the router, manage operations, and diagnose protocol and network connectivity problems. For information about the router's contexts, see “About Secure Context and Router Context” on page 34.

J-Web Overview The J-Web interface allows you to monitor, configure, troubleshoot, and manage the Services Router by means of a Web browser enabled with Hypertext Transfer Protocol (HTTP) or HTTP over Secure Sockets Layer (HTTPS). J-Web provides access to all the configuration statements supported by the Services Router, so you can fully configure it without using the JUNOS software with enhanced services CLI. You can perform the following tasks with the J-Web interface:

User Interface Overview

■

69


■

Monitoring—Display the current configuration and information about the system, interfaces, chassis, routing protocols, routing tables, routing policy filters, and other features.

■

Configuring—View the current configurations at a glance, configure the Services Router, and manage configuration files. The J-Web interface provides the following different configuration methods: ■

Configure the Services Router quickly and easily without configuring each statement individually.

■

Edit a graphical version of the JUNOS software with enhanced services CLI configuration statements and hierarchy.

■

Edit the configuration in a text file.

■

Upload a configuration file.

The J-Web interface also allows you to manage configuration history and set a rescue configuration. ■

Diagnosing—Diagnose routing problems by running the ping or traceroute diagnostic tool. The diagnostic tools also allow you to capture and analyze control traffic on the routers.

■

Managing—Manage log, temporary, and core (crash) files and schedule reboots on the J-series routers. On J-series routers, you can also manage software packages and licenses and copy a snapshot of the system software to a backup device.

■

Configuring and monitoring events—Filter and view system log messages that record events occurring on the router. You can configure files to log system log messages and also assign attributes, such as severity levels, to messages.

■

Configuring and monitoring alarms—On J-series routers only, monitor and diagnose the router by monitoring active alarms that alert you to the conditions on a network interface. You can also set the conditions that trigger alarms on an interface.

For more information about the J-Web interface, see “Using the J-Web Interface” on page 71.

CLI Overview The CLI is a straightforward command interface in which you type commands on a line and press Enter to execute them. The CLI provides command help, command completion, and Emacs-style keyboard sequences for moving around on the command line and scrolling through a buffer of recently executed commands. The CLI has two modes:

70

■

■

Operational mode—Complete set of commands to control the CLI environment, monitor and troubleshoot network connectivity, manage the Services Router, and enter configuration mode.

■

Configuration mode—Complete set of commands to configure the Services Router. This guide refers to configuration mode as the CLI configuration editor.

User Interface Overview

Chapter 4: Services Router User Interface Overview

For more information about the CLI, see “Using the Command-Line Interface” on page 77.

Before You Begin Before you start the user interface, you must perform the initial Services Router configuration described in “Establishing Basic Connectivity” on page 117. After the initial configuration, you use your username and password, and the hostname or IP address of the router, to start the user interface.

Using the J-Web Interface This section contains the following topics: ■

Starting the J-Web Interface on page 71

■

J-Web Layout on page 72

■

Elements of the J-Web Interface on page 72

■

Navigating the J-Web Interface on page 74

■

J-Web Sessions on page 77

For more information about using the J-Web interface, see the J-Web Interface User Guide.

Starting the J-Web Interface To start the J-Web interface: 1.

Launch your HTTP-enabled or HTTPS-enabled Web browser. To use HTTPS, you must have installed a certificate on the Services Router and enabled HTTPS.

NOTE: If the Services Router is running the worldwide version of the JUNOS software and you are using the Microsoft Internet Explorer Web browser, you must disable the Use SSL 3.0 option in the Web browser to access the Services Router.

2.

After http:// or https:// in your Web browser, type the hostname or IP address of the Services Router and press Enter. The J-Web login page appears.

3.

On the login page, type your username and password, and click Log In. To correct or change the username or password you typed, click Reset, type the new entry or entries, and click Log In.

Before You Begin

■

71


NOTE: The default username is root with no password. You must change this during initial configuration or the system does not accept the configuration. The J-Web Quick Configuration>Set Up or Monitor>System page appears. To explicitly terminate a J-Web session at any time, click Logout in the top pane.

J-Web Layout Each page of the J-Web interface is divided into the following panes: ■

Top pane—Displays identifying information and links.

■

Main pane—Location where you monitor, configure, diagnose, and manage the Services Router by entering information in text boxes, making selections, and clicking buttons.

■

Side pane—Displays subtasks of the Monitor, Configuration, Diagnose, or Manage task currently displayed in the main pane. For the configuration editor, this pane displays the hierarchy of configuration statements committed on the router. Click an item to access it in the main pane.

■

Bottom pane—Displays copyright and trademark information.

Elements of the J-Web Interface This section summarizes the elements of the top pane, side pane, and main pane of the J-Web interface.

Top Pane Elements The top pane comprises the elements shown in the following figure.

72

■

■

Juniper Networks logo—Link to http://www.juniper.net in a new browser window.

■

hostname – model—Hostname and model of the Services Router.

■

Logged in as: username—Username you used to log in to the Services Router.

Using the J-Web Interface


■

Help—Link to context-sensitive help information.

■

About—Link to information about the J-Web interface, such as the version number.

■

Logout—Ends your current login session with the Services Router and returns you to the login page.

■

Taskbar—Menu of J-Web tasks. Click a J-Web task to access it. ■

Monitor—View information about configuration and hardware on the Services Router.

■

Configuration—Configure the Services Router with Quick Configuration or the configuration editor, and view configuration history.

■

Diagnose—Troubleshoot network connectivity problems.

■

Manage—Manage files and licenses, upgrade software, and reboot the Services Router.

■

Events—View events and set up filters for an event summary.

■

Alarms—View the alarm summary.

Main Pane Elements The main pane comprises the elements shown in the following figure.

■

Help (?) icon—Displays useful information when you move the cursor over the question mark. This help displays field-specific information, such as the definition, format, and valid range of the field.

■

Red asterisk (*)—Indicates a required field.


■

73


■

Path to current task—Shows the successive J-Web tasks and subtasks you selected to display the current main and side panes. Click a task to return to it.

■

Icon Legend— For the Edit Configuration subtask (J-Web configuration editor) only, explains icons that appear in the user interface to provide information about configuration statements: ■

C—Comment. Move your cursor over the icon to view a comment about the configuration statement.

■

I—Inactive. The configuration statement does not affect the Services Router.

■

M—Modified. The configuration statement is added or modified.

■

*—Mandatory. The configuration statement must have a value.

Side Pane Elements The side pane comprises elements shown in the following figure. A side pane displays subtasks related to the selected task in the J-Web taskbar.

■

Click Expand all to display the entire hierarchy.

■

Click Hide all to display only the statements at the top level.

■

Click plus signs (+) to expand individual items.

■

Click minus signs (–) to hide individual items.

Navigating the J-Web Interface The layout of the panes allows you to quickly navigate through the interface. You navigate the J-Web interface, move forward and backward, scroll pages, and expand and collapse elements as you do in a typical Web browser interface.

74

■



From the taskbar, select the J-Web task that you want to perform. Selecting the task displays related subtasks in the side pane. When you select a subtask, related fields are displayed in the main pane. By default, the system selects the first subtask and displays its related fields in the main pane. The side pane and taskbar are available from all pages, allowing you to skip from one task or subtask to the other from any page in the interface. The path displayed in the top right corner of each page provides a context. Use this path to see your location in a configuration hierarchy. Clicking any link in the path displays the corresponding page. You can easily navigate to most subtasks by selecting them from the side pane. On pages where you are required to take an action, buttons and links allow you to move to the next or previous page as you perform certain actions. Most buttons and links are self-explanatory. But some buttons have different functions on the Quick Configuration and Edit Configuration (J-Web configuration editor) pages. For more information, see “Navigating the Quick Configuration Pages” on page 75 and “Navigating the J-Web Configuration Editor” on page 75.

Navigating the Quick Configuration Pages Table 34 on page 75 describes the functions of key Quick Configuration buttons. Table 34: J-Web Quick Configuration Buttons Function

Button

Commit your entries into the configuration, and return to the previous J-Web page.

OK

Clear the entries you have not yet applied to the configuration, and return to the previous J-Web page.

Cancel

Commit your entries into the configuration, and stay on the same J-Web page.

Apply

Navigating the J-Web Configuration Editor When you select Edit Configuration (J-Web configuration editor), the side pane displays the top level of the configured hierarchy committed on the Services Router. The main pane displays the configuration hierarchy options. As you navigate through the configuration, the hierarchy level is displayed at the top of the main pane. You can click a statement or identifier displayed in the main pane, or in the hierarchy in the left pane, to display the corresponding configuration options in the main pane. After typing or selecting your configuration edits, click a button in the main pane (described in Table 35 on page 76) to move to the previous page after applying, committing, or canceling the configuration. An updated configuration does not take effect until you commit it.


■

75


Table 35: Key J-Web Edit Configuration Buttons Function

Button

Apply edits to the candidate configuration, and return one level up (previous page) in the configuration hierarchy.

OK

Clear the entries you have not yet applied to the candidate configuration, and return one level up (previous page) in the configuration hierarchy.

Cancel

Verify edits and apply them to the current configuration file running on the Services Router.

Commit

Getting J-Web Help The J-Web interface provides two ways to display Help for the Monitor, Quick Configuration, Diagnose, Manage, Events, and Alarms tasks. To get Help in the J-Web interface:

76

■

■

Field-sensitive Help—Move the cursor over the question mark (?) next to the field for which you want more information. The system displays useful information about the field. Typically, this Help includes one line of information about what this field does or what you must enter in a given text box. For example, Help for the Peer Autonomous System Number field states, “the value should be a number between 1 and 65535.”

■

Context-sensitive Help—Click Help in the taskbar to open a separate page displaying the summary of all the fields on that page. To exit Help, close the page. You can navigate Help pages using hypertext links connecting related topics, or click the following options (if available) at the top and bottom of each page. Figure 41 on page 77 shows Help for the Traceroute page. ■

Prev—Access the previous page.

■

Next—Access the next page.

■

Report an Error—Access a form for providing feedback.



Figure 41: Tracing Unicast Routes Help Page

J-Web Sessions You establish a J-Web session with the Services Router through an HTTP-enabled or HTTPS-enabled Web browser. The HTTPS protocol, which uses 128-bit encryption, is available only in domestic versions of the JUNOS software. To use HTTPS, you must have installed a certificate on the Services Router and enabled HTTPS. When you attempt to log in through the J-Web interface, the Services Router authenticates your username with the same methods used for Telnet and SSH. The Services Router can support multiple J-Web sessions for a single user who logs in to each session. However, if a single user attempts to launch multiple J-Web windows—for example, by right-clicking a link to launch another instance of a Web browser—the session can have unpredictable results. If the Services Router does not detect any activity through the J-Web interface for 15 minutes, the session times out and is terminated. You must log in again to begin a new session. To explicitly terminate a J-Web session at any time, click Logout in the top pane.

Using the Command-Line Interface This section contains the following topics: ■

CLI Command Hierarchy on page 78

■

Starting the CLI on page 78

Using the Command-Line Interface

■

77


■

CLI Operational Mode on page 79

■

CLI Configuration Mode on page 80

■

CLI Basics on page 81

For more information about the CLI, see the JUNOS CLI User Guide.

CLI Command Hierarchy The CLI commands are organized hierarchically, with commands that perform a similar function grouped together under the same level. For example, all commands that display information about the Services Router system and system software are grouped under the show command, and all commands that display information about the routing table are grouped under the show route command. Figure 42 on page 78 illustrates a portion of the show command hierarchy. Figure 42: CLI Command Hierarchy Example

To execute a command, you enter the full command name, starting at the top level of the hierarchy. For example, to display a brief view of the routes in the routing table, use the command show route brief. The hierarchical organization results in commands that have a regular syntax and provides the following features that simplify CLI use: ■

Consistent command names—Commands that provide the same type of function have the same name, regardless of the portion of the software they are operating on. For example, all show commands display software information and statistics, and all clear commands erase various types of system information.

■

Lists and short descriptions of available commands—Information about available commands is provided at each level of the CLI command hierarchy. If you type a question mark (?) at any level, you see a list of the available commands along with a short description of each command.

■

Command completion—Command completion for command names (keywords) and command options is also available at each level of the hierarchy. If you type a partial command name followed immediately by a question mark (with no intervening space), you see a list of commands that match the partial name you typed.

Starting the CLI To start the CLI:

78

■



1.

2.

Establish a connection with the Services Router: ■

To access the router remotely from the network, enter the command you typically use to establish a remote connection (such as Telnet or ssh) using the router hostname.

■

To access the router through a management device attached to the console port, start the terminal application.

■

To access the router through the J-Web interface, select Diagnose>CLI Terminal in the J-Web interface. For more information, see the J-Web Interface User Guide.

Log in using your username and password. After you log in, you enter a UNIX shell.

3.

Start the CLI. % cli user@host>

The presence of the angle bracket (>) prompt indicates the CLI has started. By default, the prompt is preceded by a string that contains your username and the hostname of the router. To exit the CLI and return to the UNIX shell, enter the quit command.

CLI Operational Mode The CLI has two modes: operational and configuration. When you log in to the Services Router and the CLI starts, you are at the top level of operational mode. To view a list of top-level operational mode commands, type a question mark (?) at the command-line prompt. user@host> ? Possible completions: clear configure file help monitor mtrace ping quit request restart set show ssh start telnet test traceroute

Clear information in the system Manipulate software configuration information Perform file operations Provide help information Show real-time debugging information Trace multicast path from source to receiver Ping remote target Exit the management session Make system-level requests Restart software process Set CLI properties, date/time, craft interface message Show system information Start secure shell on another host Start shell Telnet to another host Perform diagnostic debugging Trace route to remote host


■

79


At the top level of operational mode are a number of broad groups of CLI commands that are used to perform the following functions: ■

Control the CLI environment.

■

Monitor and troubleshoot the router.

■

Connect to other systems.

■

Manage files and software images.

■

Control software processes.

■

Stop and reboot the router.

■

Enter configuration mode.

To control the CLI environment, see “Configuring the CLI Environment” on page 84. To enter configuration mode, see “CLI Configuration Mode” on page 80. For information about the other CLI operational mode functions, see the JUNOS Software with Enhanced Services Administration Guide.

CLI Configuration Mode To configure the Services Router, including system parameters, routing protocols, security, interfaces, network management, and user access, you must enter configuration mode. In configuration mode, the CLI provides commands to configure the router, load a text (ASCII) file that contains the router configuration, activate a configuration, and save the configuration to a text file. You enter configuration mode by entering the configure operational mode command. The CLI prompt changes from user@host> to user@host#. To view a list of configuration mode commands, type a question mark (?) at the command-line prompt. (You do not need to press Enter after typing the question mark.) user@host# ? Possible completions: Enter activate annotate commit copy deactivate delete edit exit help insert load quit rename rollback run save set show

80

■


Execute this command Remove the inactive tag from a statement Annotate the statement with a comment Commit current set of changes Copy a statement Add the inactive tag to a statement Delete a data element Edit a sub-element Exit from this level Provide help information Insert a new ordered data element Load configuration from ASCII file Quit from this level Rename a statement Roll back to previous committed configuration Run an operational-mode command Save configuration to ASCII file Set a parameter Show a parameter


status top up wildcard

Show users currently editing configuration Exit to top level of configuration Exit one level of configuration Wildcard operations

The JUNOS software configuration consists of a hierarchy of statements. There are two types of statements: container statements, which contain other statements, and leaf statements, which do not contain other statements. All the container and leaf statements together form the configuration hierarchy. Each statement consists of a fixed keyword and, optionally, an identifier that you define, such as the name of an interface or a username. To configure the Services Router or to modify an existing configuration, you add statements to the configuration with the edit and set configuration mode commands. For more information about the CLI configuration editor and configuration mode, see the JUNOS software configuration guides.

CLI Basics This section contains the following topics: ■

Editing Keystrokes on page 81

■

Command Completion on page 82

■

Online Help on page 83

■

Configuring the CLI Environment on page 84

Editing Keystrokes In the CLI, you use keystrokes to move around on and edit the command line, and to scroll through a list of recently executed commands. Table 36 on page 81 lists some typical CLI editing tasks and the keystrokes that perform them. Table 36: CLI Editing Keystrokes Task Category

Action

Keyboard Sequence

Move the cursor.

Move the cursor back one character.

Ctrl-b

Move the cursor back one word.

Esc b

Move the cursor forward one character.

Ctrl-f

Move the cursor forward one word.

Esc f

Move the cursor to the end of the command line.

Ctrl-e


■

81


Table 36: CLI Editing Keystrokes (continued) Task Category

Action

Keyboard Sequence

Delete characters.

Delete the character before the cursor.

Ctrl-h, Delete, or Backspace

Delete the character at the cursor.

Ctrl-d

Delete all characters from the cursor to the end of the command line.

Ctrl-k

Delete all characters on the command line.

Ctrl-u or Ctrl-x

Delete the word before the cursor.

Ctrl-w or Esc Backspace

Delete the word after the cursor.

Esc d

Insert recently deleted text.

Insert the most recently deleted text at the cursor.

Ctrl-y

Redraw the screen.

Redraw the current line.

Ctrl-l

Display previous command lines.

Scroll backward through the list of recently executed commands.

Ctrl-p

Scroll forward through the list of recently executed commands.

Ctrl-n

Search the CLI history in reverse order for lines matching the search string.

Ctrl-r

Search the CLI history by typing some text at the prompt, followed by the keyboard sequence. The CLI attempts to expand the text into the most recent word in the history for which the text is a prefix.

Esc /

Specify the number of times to execute a keyboard sequence. Replace number with a number from 1 through 9, and replace sequence with a keyboard sequence in this table.

Esc number sequence

Repeat keyboard sequences.

Command Completion You do not always have to remember or type the full command or option name for the CLI to recognize it. To display all possible command or option completions, type the partial command followed immediately by a question mark (?). To complete a command or option that you have partially typed, press Tab or Spacebar. If the partially typed letters uniquely identify a command, the complete command name appears. Otherwise, a message indicates that your entry is ambiguous or invalid. Possible command completions are displayed if your entry is ambiguous. You can also use command completion on filenames and usernames. To display all possible values, type one or more characters followed immediately by a question mark. To complete these partial entries, press Tab only. Pressing Spacebar does not work.

82

■



Online Help The CLI provides context-sensitive Help at every level of the command hierarchy. The Help information tells you which commands are available at the current level in the hierarchy and provides a brief description of each. To get help while in the CLI, type a question mark (?) in one of the following ways: ■

Type a question mark at the command-line prompt. The CLI lists the available commands and options. For examples, see “CLI Operational Mode” on page 79 and “CLI Configuration Mode” on page 80.

■

Type a question mark after entering the complete name of a command or command option. The CLI lists the available commands and options, then redisplays the command names and options that you typed: user@host# set schedulers ? regress@arcona# set schedulers ? Possible completions: + apply-groups Groups from which to inherit configuration data + apply-groups-except Don't inherit configuration data from these groups > scheduler Scheduler configuration [edit] user@host# set schedulers

■

Type a question mark in the middle of a command name. The CLI lists possible command completions that match the letters you have entered so far, then redisplays the letters that you typed. For example, to list all operational mode commands that start with the letter s, type the following: user@host> s? Possible completions: set Set CLI properties, date/time, craft interface message show Show system information ssh Start secure shell on another host start Start shell user@host> s

When you enter the help commands described in Table 37 on page 84, the CLI displays usage guidelines and summary information for configuration statements and operational mode commands. You can enter help commands in operational or configuration mode.


■

83


Table 37: help Commands CLI Command

Description

help apropos string

Displays Help based on a text string contained in a statement or command name. If the string contains spaces, enclose it in quotation marks. You also can specify a regular expression for the string, using standard UNIX-style regular expression syntax. In configuration mode, this command displays statement names and Help text that match the string specified. In operational mode, this command displays the following types of commands that match the string specified, plus Help text: ■

Operational mode commands

■

help topic and help reference commands you can enter for more information

For example, to get a list of statements that contain the string traps, enter the help apropos traps command in configuration mode. Displays summary information for configuration statements.

help reference string

For example, to display summary information for the OSPF hello interval, enter the command help reference ospf hello-interval. NOTE: In some cases, multiple Help topics are available for the same configuration statement. When an existing JUNOS statement has been modified for JUNOS software with enhanced services, two help commands are available—one describing the original JUNOS statement and another describing the updates to that statement for JUNOS software with enhanced services. To view the Help topic that describes the modifications made for JUNOS software with enhanced services enter the help command that contains the string junos-es. For example, to view Help for the access profile profile-name authentication-order statement, enter help reference access authentication-order-junos-es. Displays usage guidelines for configuration statements.

help topic string

For example, to display usage guidelines for the OSPF hello interval, enter the command help topic ospf hello-interval.

Configuring the CLI Environment You can configure the CLI environment for your current login session. Your settings are not retained when you exit the CLI. To display the current CLI settings, enter the show cli command: user@host> show cli CLI complete-on-space set to on CLI idle-timeout disabled CLI restart-on-upgrade set to on CLI screen-length set to 49 CLI screen-width set to 132 CLI terminal is 'vt100'

84

■



CLI is operating in enhanced mode CLI working directory is '/cf/var/home/remote'

To change the CLI environment, use the set cli operational mode command: user@host> set cli ? Possible completions: complete-on-space directory idle-timeout prompt restart-on-upgrade screen-length screen-width terminal

Set Set Set Set Set

whether typing space completes current word working directory maximum idle time before login session ends CLI command prompt string whether CLI prompts to restart after software upgrade

Set number of lines on screen Set number of characters on a line Set terminal type

Table 38 on page 85 shows how you can change the CLI environment features. Table 38: Configuring the CLI Environment Environment Feature

CLI Command

Default Setting

Options

Command completion

set cli complete-on-space (on | off)

on—Pressing Tab or Spacebar

■

Set off to allow only Tab for command completion.

■

Set on to re-enable Tab and Spacebar for command completion.

Your working directory

set cli directory path8

/cf/var/home/remote

Replace path with the directory you want to enter when you log in to the Services Router.

Minutes of idle time

set cli idle-time minutes

Your session never times out unless your login class specifies a timeout.

■

To enable the timeout feature, replace timeout with a value between 1 and 100,000.

■

To disable the timeout feature, replace timeout with 0.

completes a command.

Your session prompt

set cli prompt string

user@host>

Replace string with the prompt you want. If the prompt contains spaces or special characters, enclose string in quotation marks (“ “).

Restart-after-upgrade prompt

set cli restart-on-upgrade (on | off)

CLI prompts you to restart the Services Router after a software upgrade.

■

Set off to disable the prompt for the session.

■

Set on to reenable the prompt.


■

85


Table 38: Configuring the CLI Environment (continued) Environment Feature

CLI Command

Default Setting

Options

Number of CLI output line displayed at once

set cli screen-length length

Variable (depends on terminal type).

■

To change the number of lines displayed on the screen, replace length with a value between 1 and 100,000.

■

To disable the display of a set number of lines, replace length with 0. (This feature can be useful when you are issuing CLI commands from scripts.)

Number of CLI characters displayed on a line

set cli screen-width width

Variable (depends on terminal type).

To change the number of characters displayed on a line, replace width with a value between 0 and 100,000.

Your terminal type.

set cli terminal terminal-type

unknown, or set by console.

Replace terminal-type with one of the following values:

86

■


■

ansi

■

vt100

■

small-xterm

■

xterm

Part 2

Installing a Services Router ■

Preparing for Router Installation on page 89

■

Installing and Connecting a Services Router on page 103

■

Establishing Basic Connectivity on page 117

■

Installing JUNOS Software with Enhanced Services on page 141

■

Configuring Secure Web Access on page 143

■

Installing and Managing JUNOS Software with Enhanced Services Licenses on page 151


■

87


88

■


Chapter 5

Preparing for Router Installation Before installing a J-series Services Router, make sure that your site has the proper operating environment and equipment. Use the checklist at the end of the chapter to help you prepare your site. This chapter discusses the following topics: ■

General Site Guidelines on page 89

■

Rack Requirements on page 90

■

Router Environmental Tolerances on page 92

■

Fire Safety Requirements on page 92

■

Power Guidelines, Requirements, and Specifications on page 93

■

Network Cable Specifications on page 100

■

ISDN Provisioning on page 100

■

Site Preparation Checklist on page 101

General Site Guidelines The following precautions help you plan an acceptable operating environment for your Services Router and avoid environmentally caused equipment failures: ■

For the cooling system to function properly, the airflow around the chassis must be unrestricted. Ensure that there is adequate circulation in the installation location. In J2320 and J2350 routers, allow at least 6 in. (15.2 cm) of clearance between the left and right sides of the chassis and adjacent equipment. In J4350 and J6350 routers, allow at least 6 in. (15.2 cm) of clearance between the front and back of the chassis and adjacent equipment.

■

Follow ESD procedures described in “Preventing Electrostatic Discharge Damage” on page 237, to avoid damaging equipment. Static discharge can cause components to fail completely or intermittently over time.

■

Install blank PIM panels in empty slots, to prevent any interruption or reduction in the flow of air across internal components.

General Site Guidelines

■

89


Rack Requirements J-series Services Routers must be installed in a rack. Many types of racks are acceptable, including front-mount racks, four-post (telco) racks, and center-mount racks. The following sections describe rack requirements: ■

Rack Size and Strength for J2320 and J2350 Routers on page 90

■

Rack Size and Strength for J4350 and J6350 Routers on page 91

■

Connection to Building Structure on page 91

Rack Size and Strength for J2320 and J2350 Routers The J2320 and J2350 Services Routers are designed for installation in a rack that complies with either of the following standards: ■

A 19-in. rack as defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D) published by the Electronics Industry Association (http://www.eia.org)

■

A 600-mm rack as defined in the four-part Equipment Engineering (EE); European telecommunications standard for equipment practice (document numbers ETS 300 119-1 through 119-4) published by the European Telecommunications Standards Institute (http://www.etsi.org) The horizontal spacing between the rails in a rack that complies with this standard is usually wider than the router's mounting ears, which measure 19 in. (48.2 cm) from outer edge to outer edge. Use approved wing devices to narrow the opening between the rails as required.

The rack rails must be spaced widely enough to accommodate the router chassis's external dimensions: ■

J2320 chassis—1.75 in. (4.45 cm) high, 17.51 in. (44.48 cm) wide, and 15.1 in. (38.35 cm) deep.

■

J2350 chassis—2.61 in. (6.63 cm) high, 17.51 in. (44.48 cm) wide, and 15.1 in. (38.35 cm) deep.

The outer edges of the mounting ears extend the width of either chassis to 19 in. (48.2 cm), and the front of the chassis extends approximately 0.78 in. (1.98 cm) beyond the mounting ears. The spacing of rails and adjacent racks must also allow for the clearances around the router and rack. (See “General Site Guidelines” on page 89.)

CAUTION: If you are mounting the router in a cabinet, be sure that ventilation is sufficient to prevent overheating. If a front-mount rack is used, we recommend supporting the back of the router with a shelf or other structure.

90

■

Rack Requirements

Chapter 5: Preparing for Router Installation

The J2320 chassis height of 1.75 in. (4.45 cm) equals 1 U. The J2350 chassis height of 2.61 in. (6.63 cm) equals 1.5 U. Each U is a standard rack unit defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D) published by the Electronics Industry Association.

Rack Size and Strength for J4350 and J6350 Routers The Services Router is designed for installation in a rack that complies with either of the following standards: ■

A 19-in. rack as defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D) published by the Electronics Industry Association (http://www.eia.org)

■

A 600-mm rack as defined in the four-part Equipment Engineering (EE); European telecommunications standard for equipment practice (document numbers ETS 300 119-1 through 119-4) published by the European Telecommunications Standards Institute (http://www.etsi.org) The horizontal spacing between the rails in a rack that complies with this standard is usually wider than the router's mounting ears, which measure 19 in. (48.2 cm) from outer edge to outer edge. Use approved wing devices to narrow the opening between the rails as required.

The rack rails must be spaced widely enough to accommodate the router chassis's external dimensions: 3.44 in. (8.74 cm) high, 17.44 in. (44.3 cm) wide, and 21.13 in. (53.67 cm) deep. The outer edges of the mounting ears extend the width of either chassis to 19.44 in. (48.38 cm), and the front of the chassis extends approximately 0.5 in. (1.27 cm) beyond the mounting ears. The spacing of rails and adjacent racks must also allow for the clearances around the router and rack. (See “General Site Guidelines” on page 89.)

CAUTION: If you are mounting the router in a cabinet, be sure that ventilation is sufficient to prevent overheating. If a front-mount rack is used, we recommend supporting the back of the router with a shelf or other structure.

The J4350 and J6350 chassis height of 3.44 in. (8.74 cm) equals 2 U. Each U is a standard rack unit defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310-D) published by the Electronics Industry Association.

Connection to Building Structure Always secure the rack to the structure of the building. If your geographical area is subject to earthquakes, bolt the rack to the floor. For maximum stability, also secure the rack to ceiling brackets. For more information, see “Rack-Mounting Requirements and Warnings” on page 253.

Rack Requirements

■

91


Router Environmental Tolerances Table 39 on page 92 specifies the environmental conditions required for normal Services Router operation. In addition, the site must be as dust-free as possible. Dust can clog air intake vents, reducing cooling system efficiency. Check vents frequently, cleaning them as necessary. Table 39: Router Environmental Tolerances Description

Value

Altitude

No performance degradation to 10,000 ft (3048 m)

Relative humidity

Normal operation ensured in relative humidity range of 5% to 90%, noncondensing

Temperature

Normal operation ensured in temperature range of 0°C (32°F) to 40°C (104°F) Non-operating storage temperature in shipping carton: –40°C (–40°F) to 70°C (158°F)

Seismic

Designed to meet Telcordia Technologies Zone 4 earthquake requirements

Maximum thermal output

■

J2320 chassis: 1091 BTU/hour (320 W)

■


■


■


Fire Safety Requirements In the event of a fire emergency involving Services Routers and other network equipment, the safety of people is the primary concern. Establish procedures for protecting people in the event of a fire emergency, provide safety training, and properly provision fire-control equipment and fire extinguishers. In addition, establish procedures to protect your equipment in the event of a fire emergency. Juniper Networks products must be installed in an environment suitable for electronic equipment. We recommend that fire suppression equipment be available in the event of a fire in the vicinity of the equipment, and that all local fire, safety, and electrical codes and ordinances be observed when you are installing and operating your equipment.

Fire Suppression In the event of an electrical hazard or an electrical fire, first unplug the power cord. (For shutdown instructions, see “Powering a Services Router On and Off” on page 115.)

92

■

Router Environmental Tolerances


Then, use a Type C fire extinguisher, which uses noncorrosive fire retardants, to extinguish the fire. For more information about fire extinguishers, see “Fire Suppression Equipment” on page 93.

Fire Suppression Equipment Type C fire extinguishers, which use noncorrosive fire retardants such as carbon dioxide (CO2) and Halotron, are most effective for suppressing electrical fires. Type C fire extinguishers displace the oxygen from the point of combustion to eliminate the fire. For extinguishing fire on or around equipment that draws air from the environment for cooling, use this type of inert oxygen displacement extinguisher instead of an extinguisher that leave residues on equipment. Do not use multipurpose Type ABC chemical fire extinguishers (dry chemical fire extinguishers) near Juniper Networks equipment. The primary ingredient in these fire extinguishers is monoammonium phosphate, which is very sticky and difficult to clean. In addition, in minute amounts of moisture, monoammonium phosphate can become highly corrosive and corrodes most metals.

NOTE: To keep warranties effective, do not use a dry chemical fire extinguisher to control a fire at or near a Juniper Networks router. If a dry chemical fire extinguisher is used, the unit is no longer eligible for coverage under a service agreement. Any equipment in a room in which a chemical fire extinguisher has been discharged is subject to premature failure and unreliable operation. The equipment is considered to be irreparably damaged. We recommend that you dispose of any irreparably damaged equipment in an environmentally responsible manner.

Power Guidelines, Requirements, and Specifications All Services Routers are available with AC power. J2350, J4350, and J6350 routers are also available with DC power. For information about each router's power system, see “J4350 Power System” on page 30 and “J6350 Power System” on page 31. For site wiring and power system guidelines, requirements, and specifications, see the following sections: ■

Site Electrical Wiring Guidelines on page 94

■

Router Power Requirements on page 95

■

AC Power, Connection, and Power Cord Specifications on page 95

■

DC Power, Connection, and Power Cable Specifications on page 97

■

Planning for Power Management on page 98

Power Guidelines, Requirements, and Specifications

■

93


Site Electrical Wiring Guidelines WARNING: Certain ports on the router are designed for use as intrabuilding (within-the-building) interfaces only (Type 2 or Type 4 ports as described in GR-1089-CORE, Issue 4) and require isolation from the exposed outside plant (OSP) cabling. To comply with NEBS requirements and protect against lightening surges and commercial power disturbances, the intrabuilding ports must not be metallically connected to interfaces that connect to the OSP or its wiring. The intrabuilding ports on the router are suitable for connection to intrabuilding or unexposed wiring or cabling only. The addition of primary protectors is not sufficient protection for connecting these interfaces metallically to OSP wiring.

WARNING: DC-powered J2350, J4350 and J6350 Services Routers are intended for installation only in a restricted access location. When planning the electrical wiring at your site, consider the factors discussed in the following sections.

Signaling Limitations Improperly installed wires can emit radio interference. In addition, the potential for damage from lightning strikes increases if wires exceed recommended distances, or if wires pass between buildings. The electromagnetic pulse (EMP) caused by lightning can damage unshielded conductors and destroy electronic devices. If your site has previously experienced such problems, you might want to consult experts in electrical surge suppression and shielding.

Radio Frequency Interference You can reduce or eliminate the emission of radio frequency interference (RFI) from your site wiring by using twisted-pair cable with a good distribution of grounding conductors. If you must exceed the recommended distances, use a high-quality twisted-pair cable with one ground conductor for each data signal when applicable.

Electromagnetic Compatibility If your site is susceptible to problems with electromagnetic compatibility (EMC), particularly from lightning or radio transmitters, you might want to seek expert advice. Strong sources of electromagnetic interference (EMI) can destroy the signal drivers and receivers in the router and conduct power surges over the lines into the equipment, resulting in an electrical hazard. It is particularly important to provide a properly grounded and shielded environment and to use electrical surge-suppression devices.

94

■



CAUTION: To comply with intrabuilding lightning/surge requirements, intrabuilding wiring must be shielded, and the shield for the wiring must be grounded at both ends.

Router Power Requirements Table 40 on page 95 and Table 41 on page 95 list the AC and DC power system electrical specifications for Services Routers. Table 40: AC and DC Power System Electrical Specifications for J2320 and J2350 Routers Item

Specification

AC input voltage

100 to 240 VAC nominal

AC input line frequency

50 to 60 Hz

AC system current rating

J2320 Services Routers: 3.2 A to 1.3 A J2350 Services Routers: 3.5 A to 1.5 A

DC input voltage

–48 to –60 VDC operating range

DC system current rating

7.2 A

Table 41: AC and DC Power System Electrical Specifications for J4350 and J6350 Routers Item

Specification

AC input voltage

100 to 240 VAC nominal

AC input line frequency

50 to 60 Hz

AC system current rating

J4350 Services Routers: 6 A J6350 Services Routers: 8 A

DC input voltage

–48 to –60 VDC operating range

DC system current rating

20 A

AC Power, Connection, and Power Cord Specifications NOTE: The AC power cord for the Services Router is intended for use with the router only and not for any other use.


■

95


Detachable AC power cords, each 2.5 m (approximately 8 ft) long, are supplied with the Services Router. The appliance coupler at the female end of the cord inserts into the appliance inlet on the faceplate of the AC power supply. The coupler is type C19 as described by International Electrotechnical Commission (IEC) standard 60320. The plug at the male end of the power cord fits into the power source receptacle that is standard for your geographical location.

NOTE: In North America, AC power cords must not exceed 4.5 m (approximately 14.75 ft) in. length, to comply with National Electrical Code (NEC) Sections 400-8 (NFPA 75, 5-2.2) and 210-52, and Canadian Electrical Code (CEC) Section 4-010(3). The cords supplied with the router are in compliance. Table 42 on page 96 lists AC power cord specifications provided for each country or region. Table 42: AC Power Cord Specifications Country

Electrical Specifications

Plug Standards

Australia

250 VAC, 10 A, 50 Hz

AS/NZ 3112–1993

China

250 VAC, 10 A, 50 Hz

GB2099.1 1996 and GB1002 1996 (CH1-10P)

Europe (except Italy and United Kingdom)

250 VAC, 10 A, 50 Hz

CEE (7) VII

Italy

250 VAC, 10 A, 50 Hz

CEI 23–16/VII

Japan

125 VAC, 12 A, 50 Hz or 60 Hz

JIS 8303

North America

125 VAC, 10 A, 60 Hz

NEMA 5-15

United Kingdom

250 VAC, 10 A, 50 Hz

BS 1363A

Figure 43 on page 96 illustrates the plug on the power cord for each country or region listed in Table 42 on page 96. Figure 43: AC Plug Types

NOTE: Power cords and cables must not block access to router components or drape where people might trip on them.

96

■



For information about the AC power supply, see “J2320 Power System” on page 18, “J2350 Power System” on page 18, “J4350 Power System” on page 30 or “J6350 Power System” on page 31. To connect the power cord during initial installation, see “Connecting Power” on page 110. To replace the AC power cord, see “Replacing AC Power Supply Cords” on page 181.

DC Power, Connection, and Power Cable Specifications Each DC power supply has a single DC input (–48 VDC and return) that requires a dedicated circuit breaker: ■

J2350 routers—minimum 15 A (–48 VDC)

■

J4350 and J6350 routers—minimum 25 A (–48 VDC)

If the J6350 router contains redundant DC power supplies, one power supply must be powered by a dedicated power feed derived from feed A, and the other power supply must be powered by a dedicated power feed derived from feed B. This configuration provides the commonly deployed A/B feed redundancy for the system. Most sites distribute DC power through a main conduit that leads to frame-mounted DC power distribution panels, one of which might be located at the top of the rack that houses the router. A pair of cables (one input and one return) connects each set of terminal studs to the power distribution panel.

CAUTION: You must ensure that power connections maintain the proper polarity. The power source cables might be labeled (+) and (–) to indicate their polarity. There is no standard color coding for DC power cables. The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply.

WARNING: Power plant ground and chassis ground must be connected to the same building ground.

CAUTION: Before router installation begins, a licensed electrician must attach a cable lug to the grounding and power cables that you supply. A cable with an incorrectly attached lug can damage the router. Each DC power cable (–48 VDC and return) must be 14 AWG single-strand wire cable, or as permitted by the local code. Each lug attached to the power cables must be a ring-type, vinyl-insulated TV14-6R lug, or equivalent.


■

97


NOTE: Power cords and cables must not block access to router components or drape where people might trip on them. For information about the DC power supply, see “J2350 Power System” on page 18, “J4350 Power System” on page 30 or “J6350 Power System” on page 31. To connect the DC power cable during initial installation, see “Connecting DC Power” on page 112. To replace a DC power cable, see “Replacing DC Power Supply Cables” on page 184.

Planning for Power Management Before you install a chassis or add a new PIM to an existing chassis, verify that the combination of PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) to be installed does not exceed the power and heat capacities for that model. Add the low-power tokens, high-power tokens, and heat tokens required by each PIM, and compare them to the capacity of the chassis.

NOTE: The low power and high power correspond to a specific voltage for that PIM.

CAUTION: Do not install a combination of modules in a single chassis that exceeds the maximum power and heat capacity of the chassis. If J-series power management is enabled, PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) that exceed the maximum power and heat capacity remain offline when the chassis is powered on. To verify that the combination of PIMs to be installed in a chassis does not exceed the power and heat capacities for that model: 1.

Check Table 43 on page 99 to determine the token values for low-power, high-power, and heat for each PIM that you plan to install in the chassis.

2.

For all PIMs to be installed in the chassis:

3.

a.

Add the low-power tokens for all PIMs to be installed in the chassis.

b.

Add the high-power tokens for all PIMs to be installed in the chassis.

c.

Add the heat dissipation tokens for all PIMs to be installed in the chassis.

Verify that the total number of low-power tokens, total number of high-power tokens, and the total number of heat dissipation tokens do not exceed the maximums permitted for your J-series chassis as specified in Table 44 on page 100.

Table 43 on page 99 shows the low-power consumption, high-power consumption, and heat dissipation, represented in non-dimensional tokens, assigned to each J-series PIM.

98

■



Table 43: J-series PIM Power Consumption and Heat Dissipation Name

Model Number

PIM Abbreviation in JUNOS CLI

Tokens Low Power

High Power

Heat


JXU-SFP-S

1xSFP uPIM

8

–

8


JXU-6GE-SFP-S

6xSFP uPIM

13

–

13


JXU-8GE-TX-S

8xGE uPIM

21

–

27


JXU-16GE-TX-S

16xGE uPIM

38

–

36

1-Port Copper Gigabit Ethernet ePIM

JXE-1GE-TX-S

1xGE Copper

6

–

7

1-Port SFP Gigabit Ethernet ePIM

JXE-1GE-SFP-S

1xGE SFP

4

–

4


JX-2Serial-S

2xSerial

5

–

6

Dual-Port E1 PIM

JX-2E1-RJ48-S

2xE1

6

–

6

Dual-Port T1 PIM

JX-2T1-RJ48-S

2xT1

6

–

5


JX-2CT1E1-RJ45-S

2xCT1E1 / PRI

5

–

5

E3 PIM (1 port)

JX-1E3-S

1xE3

7

–

7

T3 PIM (also known as DS3)

JX-1DS3-S

1xT3

7

–

7


JX-2FE-TX-S

2xFE

6

1

6

4-Port Fast Ethernet ePIM

JXE-4FE-TX-S

4xFE ePIM

9

–

9

4-Port ISDN BRI S/T PIM

JX-4BRI-S-S

4x BRI S/T

4

–

4

4-Port ISDN BRI U PIM

JX-4BRI-U-S

4x BRI U

4

–

6

ADSL 2/2+ Annex A PIM (1 port, for POTS)

JX-1ADSL-A-S

1x ADSL Annex A

16

2

16


■

99


Table 43: J-series PIM Power Consumption and Heat Dissipation (continued) Name

Model Number

PIM Abbreviation in JUNOS CLI

Tokens Low Power

High Power

Heat

ADSL 2/2+ Annex B PIM (1 port, for ISDN)

JX-1ADSL-B-S

1x ADSL Annex B

16

2

16

G.SHDSL PIM (2-port two-wire mode or 1-port four-wire mode)

JX-2SHDSL-S

2x SHDSL (ATM)

9

–

10


ISM-200–WXC

wan-acceleration

7

37

49

Table 44 on page 100 lists the maximum power tokens and maximum heat tokens available for each model. Table 44: Maximum Power and Heat Capacities of J-series Models Model

Low- Power Capacity (tokens)

High- Power Capacity (tokens)

Heat Capacity (tokens)

J2320

50

50

68

J2350

84

84

84

J4350

100

100

100

J6350

100

100

100

Network Cable Specifications The Services Router supports interfaces that use various kinds of network cable. For information about the type of cable used by each interface, see “Network Cable Specifications and Connector Pinouts” on page 215.

ISDN Provisioning You might need a network termination type 1 (NT1) device to connect your ISDN interface to the ISDN service. Contact your service provider for details on the following information:

100

■

■

External NT1 device and ISDN cable

■

If the two items are required, where to obtain the items

■

List of NT1 vendors

Network Cable Specifications


Site Preparation Checklist The checklist in Table 45 on page 101 summarizes the tasks you need to perform when preparing a site for Services Router installation. Table 45: Site Preparation Checklist Item or Task

Performed By

Date

Notes

Verify that environmental factors such as temperature and humidity do not exceed router tolerances. Measure the distances between external power sources and the router installation site. Select the type of rack. Plan the rack location, including required space clearances. Secure the rack to the floor and the building structure. Acquire appropriate cables and connectors.

Site Preparation Checklist

■

101


102

■

Site Preparation Checklist

Chapter 6

Installing and Connecting a Services Router Make the appropriate preparations and verify the J-series equipment before installing a J-series Services Router and connecting it to a power source and the network.

CAUTION: Do not install a combination of modules in a single chassis that exceeds the maximum power and heat capacity of the chassis. If J-series power management is enabled, PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) that exceed the maximum power and heat capacity remain offline when the chassis is powered on. This chapter contains the following topics: ■


■

Unpacking a J-series Services Router on page 104

■

Installing J2320 and J2350 Routers on page 105

■

Installing J4350 and J6350 Routers on page 106

■

Connecting Interface Cables to Services Routers on page 109

■

Chassis Grounding on page 109

■

Connecting Power on page 110

■

Powering a Services Router On and Off on page 115

Before You Begin Before you begin installation, complete the following tasks: ■

Read the information in “Maintenance and Operational Safety Guidelines and Warnings” on page 261, with particular attention to “Chassis Lifting Guidelines” on page 252.

■

Determine where to install the Services Router, and verify that the rack or installation site meets the requirements described in “Preparing for Router Installation” on page 89.

■

For installation, gather the following equipment and tools:

Before You Begin

■

103


■

■

For J2320 and J2350 Services Routers—Number 2 Phillips screwdriver, and mounting screws appropriate for your rack.

■

For J4350 and J6350 Services Routers—Mounting brackets and screws (provided), number 2 Phillips screwdriver, and mounting screws appropriate for your rack.

To connect the router to power and ground, have ready a grounding cable and lug, as specified in “Chassis Grounding” on page 109, and the power cords or cords shipped with the router. (You must supply your own power cables if you have a DC-powered router. See “DC Power, Connection, and Power Cable Specifications” on page 97.)

NOTE: The AC power cord for the Services Router is intended for use with the router only and not for any other use.

■

To connect network interfaces, have ready a length of cable used by the interface, as specified in “Network Cable Specifications and Connector Pinouts” on page 215.

■

If your router has ISDN ports, you might need an NT1 device to connect to the ISDN service. For details, see “ISDN Provisioning” on page 100.

Unpacking a J-series Services Router The Services Router is shipped in a cardboard carton and secured with foam packing material. The carton also contains an accessory box and quick start instructions.

NOTE: The router is maximally protected inside the shipping carton. Do not unpack it until you are ready to begin installation. To unpack the router:

104

■

1.

Move the shipping carton to a staging area as close to the installation site as possible, but where you have enough room to remove the router.

2.

Position the carton so that the arrows are pointing up.

3.

Open the top flaps on the shipping carton.

4.

Remove the accessory box, and verify the contents against the parts inventory on the label attached to the carton.

5.

Pull out the packing material holding the router in place.

6.

Verify the contents of the carton against the packing list included with the router.

7.

Save the shipping carton and packing materials in case you later need to move or ship the router.

Unpacking a J-series Services Router

Chapter 6: Installing and Connecting a Services Router

Installing J2320 and J2350 Routers WARNING: DC-powered Services Routers are intended for installation only in a restricted access location. You can center-mount or front-mount the J2320 and J2350 Services Routers in a rack. In general, a center-mount rack is preferable to a front-mount rack because the more even distribution of weight in the center-mount rack provides greater stability. Many types of racks are acceptable, including four-post (telco) racks, enclosed cabinets, and open-frame racks. For more information about the type of rack or cabinet the J-series router can be installed into, see “Rack Requirements” on page 90.

WARNING: If you are installing multiple routers in one rack, install the lowest one first and proceed upward in the rack. Install heavier routers in the lower part of the rack. The router must be mounted at the bottom of the rack if it is the only unit in the rack.

WARNING: The J2320 or J2350 chassis weighs between 14.8 lb (6.7 kg) and 18.2 lb (8.3 kg). Read and follow the lifting guidelines in “Chassis Lifting Guidelines” on page 252. To install the J2320 or J2350 router into a rack: 1.

If necessary, reposition the mounting brackets. You can position the brackets in either the center or the front. Positioning the brackets in the center offers greater stability. J2320 and J2350 Services Routers come with mounting brackets installed on them (see Figure 44 on page 105).

Figure 44: Mounting Brackets on J2320 and J2350 Routers

2.

Have one person grasp the sides of the router, lift the router, and position it in the rack.

Installing J2320 and J2350 Routers

■

105


3.

Align the top hole in each mounting bracket with a hole in each rack rail as shown in Figure 45 on page 106 and Figure 46 on page 106, making sure the chassis is level.

Figure 45: Hanging a J2320 Router in a Rack

Figure 46: Hanging a J2350 Router in a Rack

4.

Have a second person install a mounting screw into each of the two aligned holes. With a number 2 Phillips screwdriver, tighten the screws.

5.

Verify that the mounting screw on one side of the rack is aligned with the mounting screw on the opposite side and that the router is level.

6.

Install the second screw in each mounting bracket.

Installing J4350 and J6350 Routers WARNING: DC-powered Services Routers are intended for installation only in a restricted access location.

106

■



You can center-mount or front-mount the J4350 and J6350 Services Routers in a rack. In general, a center-mount rack is preferable to a front-mount rack because the more even distribution of weight in the center-mount rack provides greater stability. Many types of racks are acceptable, including four-post (telco) racks, enclosed cabinets, and open-frame racks. For more information about the type of rack or cabinet the J-series router can be installed into, see “Rack Requirements” on page 90.

WARNING: If you are installing multiple routers in one rack, install the lowest one first and proceed upward in the rack. Install heavier routers in the lower part of the rack. The router must be mounted at the bottom of the rack if it is the only unit in the rack.

WARNING: The chassis weighs between 23 lb (10.4 kg) and 30.7 lb (13.9 kg). Read and follow the lifting guidelines in “Chassis Lifting Guidelines” on page 252. To install the J4350 or J6350 into a rack: 1.

Attach the mounting brackets to the sides of the chassis (see Figure 47 on page 107). You can position the brackets either in the center or the front. Positioning the brackets in the center offers greater stability.

Figure 47: Installing the Mounting Brackets

2.

Attach a screw to each rack rail in the third hole down from where you want the top of the router to be positioned. Screw only part way in, leaving about ¼ in. (6 mm) distance between the screw head and the rail (see Figure 48 on page 108).


■

107


Figure 48: Attaching the Center Screw to the Rack

3.

Lift the router and insert the larger elliptical openings in the mounting brackets onto the partially inserted screws so that the router is hanging from the two screws (see Figure 49 on page 108).

Figure 49: Hanging the Router in the Rack

108

■

4.

Verify that the mounting screws on one side of the rack are aligned with the mounting screws on the opposite side and that the router is level.

5.

Install at least two mounting screws into each mounting bracket, in addition to the center screws from which the router hangs (see Figure 50 on page 109). Use a number 2 Phillips screwdriver to tighten the screws.



Figure 50: Completing the Installation

Connecting Interface Cables to Services Routers You connect the interfaces installed in the Services Router to various network media. For more information about the network interfaces supported on the router, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide. 1.

Have ready a length of the type of cable used by the interface, as specified in “Network Cable Specifications and Connector Pinouts” on page 215.

2.

Insert the cable connector into the cable connector port on the interface faceplate.

3.

Arrange the cable as follows to prevent it from dislodging or developing stress points: a.

Secure the cable so that it is not supporting its own weight as it hangs to the floor.

b.

Place excess cable out of the way in a neatly coiled loop.

c.

Place fasteners on the loop to help maintain its shape.

Chassis Grounding To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, the Services Router must be adequately grounded before power is connected. In addition to the grounding pin on the AC power plug cord, a threaded insert (PEM nut), screw, and washer are provided on the rear of the chassis to connect the router to earth ground.

CAUTION: Before router installation begins, a licensed electrician must attach a cable lug to the grounding and power cables that you supply. A cable with an incorrectly attached lug can damage the router (for example, by causing a short circuit).

Connecting Interface Cables to Services Routers

■

109


■

For J2320 and J2350 Services Routers—The grounding cables must be, at minimum, 14 AWG single-strand wire cable. The grounding lug must be a ring-type, vinyl-insulated TV14-8R lug as shown in Figure 51 on page 111 and Figure 52 on page 112.

■

For J4350 and J6350 Services Routers—The grounding cables must be, at minimum, 12 AWG single-strand wire cable. The grounding lug must be a two-hole lug as shown in Figure 53 on page 112.

To ground the router before connecting power, you connect the grounding cable to earth ground and then attach the lug on the cable to the chassis grounding point, with the screw. (See “Connecting Power” on page 110.)

Connecting Power J2320, J2350 and J4350 Services Routers have a single fixed power supply. J6350 Services Routers have one or two field-replaceable power supplies. For more information about the J-series power specifications, see “Power Guidelines, Requirements, and Specifications” on page 93.


Connecting AC Power The router must be connected to earth ground during normal operation. The protective earthing terminal on the rear of the chassis is provided to connect the router to ground. Additional grounding is provided to an AC-powered router when you plug its power supply into a grounded AC power receptacle. The AC power cord shipped with the router connects the router to earth ground when plugged into an AC grounding-type power outlet. The router must be connected to earth ground during normal operation. For power cord requirements, see “AC Power, Connection, and Power Cord Specifications” on page 95. To connect AC power to the router:

110

■

1.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis. For more information about ESD, see “Preventing Electrostatic Discharge Damage” on page 237.

2.

Use a grounding cable to connect the router to earth ground: (For cable requirements, see “Chassis Grounding” on page 109.)

Connecting Power

a.

Verify that a licensed electrician has attached an appropriate grounding cable lug to the grounding cable.

b.

Connect one end of the grounding cable to a proper earth ground, such as the rack in which the router is installed.


c.

With a Phillips screwdriver, remove the screw and washer from the PEM nuts at the grounding point on the rear of the chassis.

d.

Place the grounding lug at the other end of the cable over the grounding point, as shown in Figure 51 on page 111 through Figure 53 on page 112.

e.

Secure the cable lug to the grounding point, first with the washer, then with the screw. On J2320 and J2350 routers, use the screw containing a captive washer to secure the cable lug to the grounding point.

3.

Locate the power cord or cords shipped with the router, which has a plug appropriate for your geographical location. For power cord specifications, see “Power Guidelines, Requirements, and Specifications” on page 93.

4.

For the power supply: a.

Insert the appliance coupler end of a power cord into the appliance inlet on the power supply faceplate, as shown in Figure 51 on page 111 through Figure 53 on page 112.

b.

Insert the plug into an AC power source receptacle.

5.

Verify that the power cord does not block access to router components or drape where people can trip on it.

6.

On J2320 and J2350 routers, use the power cable tie as follows to relieve strain on the cable (see Figure 51 on page 111 and Figure 52 on page 112): a.

Wrap the loose end of the tie around the cable, and insert it into the opening on the tie.

b.

Pull the end to tighten the tie.

To release the tie from the cable, press down the tab on the tie and loosen it.

Figure 51: Connecting AC Power to the J2320 Services Router

Connecting Power

■

111


Figure 52: Connecting AC Power to the J2350 Services Router

Figure 53: Connecting AC Power to the J4350 or J6350 Services Router

Connecting DC Power CAUTION: If your J6350 Services Router includes an optional redundant DC power supply, connect each of the two power supplies to different input power sources. Failure to do so makes the router susceptible to total power failure if one of the power supplies fails. The router must be connected to earth ground during normal operation. The protective earthing terminal on the rear of the chassis is provided to connect the router to ground. For DC cable requirements, see “DC Power, Connection, and Power Cable Specifications” on page 97. To connect DC power to the router:

112

■

Connecting Power


1.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect the strap to the ESD point on the chassis. For more information about ESD, see “Preventing Electrostatic Discharge Damage” on page 237.

2.

Use a grounding cable to connect the router to earth ground: (For cable requirements, see “Chassis Grounding” on page 109.) a.

Verify that a licensed electrician has attached an appropriate grounding cable lug to the grounding cable.

b.

Connect one end of the grounding cable to a proper earth ground, such as the rack in which the router is installed.

c.

With a Phillips screwdriver, remove the screw and washer from the PEM nut at the grounding point on the rear of the chassis.

d.

Place the grounding lug at the other end of the cable over the grounding point, as shown in Figure 54 on page 114 and Figure 55 on page 115.

e.

Secure the cable lug to the grounding point, first with the washer, then with the screw. On J2320 and J2350 routers, use the screw containing a captive washer to secure the cable lug to the grounding point.

NOTE: A DC power supply in a Services Router becomes grounded when you connect a grounding cable between the router and earth ground.

3.

For each power supply: a.

Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads cannot become active in any way during installation.


b.

Verify that a licensed electrician has attached the appropriate power cable lugs to the negative and positive DC source power cables.

c.

Use a Phillips screwdriver to remove the clear plastic cover protecting the terminal block.

d.

Within the terminal block, remove the two center screws next to the labels –48 VDC and RTN. Each screw contains a captive washer to secure a DC source power cable lug to the terminal block.

e.

Using one of the removed screws, secure the positive (+) DC source power cable lug to the RTN terminal. Tighten the screw until snug. Do not

Connecting Power

■

113


overtighten. Apply between 8 lb-in. (0.9 Nm) and 9 lb-in. (1.02 Nm) of torque to the screw. f.

Using the other removed screw, secure the negative (–) DC source power cable lug to the –48 VDC terminal. Tighten the screw until snug. Do not overtighten. Apply between 8 lb-in. (0.9 Nm) and 9 lb-in. (1.02 Nm) of torque to the screw.

g.

Dress the power cables appropriately.

h.

Replace the clear plastic cover over the terminal block.

4.

Verify that the power cables do not block access to router components or drape where people can trip on them.

5.

On J2320 and J2350 routers, use the power cable tie as follows to relieve strain on the cable (see Figure 54 on page 114 ): a.

Wrap the loose end of the tie around the cable, and insert it into the opening on the tie.

b.

Pull the end to tighten the tie.

To release the tie from the cable, press down the tab on the tie and loosen it.

Figure 54: Connecting DC Power to the J2350 Services Router

114

■

Connecting Power


Figure 55: Connecting DC Power to the J4350 or J6350 Services Router

Powering a Services Router On and Off To power on a Services Router, press the power button. The Routing Engine boots as the power supply completes its startup sequence. The POWER LED lights during startup and remains on steadily when the router is operating normally. To power off a Services Router, you can shut it down in one of the following ways: ■

Graceful shutdown—Press and release the power button. The router begins gracefully shutting down the operating system and then powers itself off.

■

Immediate shutdown—Press the power button and hold it for more than 5 seconds. The router immediately powers itself off without shutting down the operating system.

To remove power completely from the router, unplug the AC power cord or switch off the DC power source. The power button on the Services Router is a standby power switch. If the router is connected to a power source when you press the power button to power the router off, the router remains in standby mode and a small amount (5 V and 3.3 V) of standby voltage is still available in the chassis.

Powering a Services Router On and Off

■

115


116

■

Powering a Services Router On and Off

Chapter 7

Establishing Basic Connectivity The JUNOS software is preinstalled on the Services Router. When the router is powered on, it is ready to be configured. If the router does not have a configuration from the factory or your service provider, you must configure the software to establish basic connectivity. If you are setting up a Services Router for the first time, you can use either J-Web Quick Configuration or a configuration editor to configure basic connectivity. For a brief explanation of J-Web Quick Configuration and the J-Web and CLI configuration editors, see “Services Router User Interface Overview” on page 69. If you are setting up many Services Routers, autoinstallation can help automate the configuration process. For more information about autoinstallation, see the JUNOS Software with Enhanced Services Administration Guide. This chapter contains the following topics. For more information about basic connectivity, see the JUNOS System Basics Configuration Guide. ■

Basic Connectivity Terms on page 117

■

Basic Connectivity Overview on page 118

■


■

Connecting to a Services Router on page 123

■

Configuring Basic Settings with J-Web Quick Configuration on page 129

■

Configuring Basic Settings Using the CLI Configuration Wizard on page 132

■

Configuring Basic Settings with a Configuration Editor on page 136

■

Verifying Basic Connectivity and the Configuration on page 139

Basic Connectivity Terms Before configuring basic connectivity, become familiar with the terms defined in Table 46 on page 117. Table 46: Basic Connectivity Terms Term

Definition

domain name

Name that identifies the network or subnetwork of a router.

Dynamic Host Configuration Protocol (DHCP)

Protocol for assigning dynamic IP addresses to devices on a network.

Basic Connectivity Terms

■

117


Table 46: Basic Connectivity Terms (continued) Term

Definition

gateway

Packets destined for IP addresses not identified in the routing table are sent to the default gateway.

hostname

Unique name that identifies a router on the network.

loopback address

IP address of a Services Router on logical interface lo0.0 that is always active and available to external hosts and as the source address for outgoing packets.

Network Time Protocol (NTP)

Protocol that provides a reliable way of synchronizing the system time of a router.

root user

A superuser or system administrator who can perform any task in the file system.

secure shell (SSH)

Protocol that provides a secured method of logging in to a remote network system.

Telnet

Software that allows a computer to act as a remote terminal on a network system.

Basic Connectivity Overview To connect your Services Router to the network and establish basic connectivity, you enter information about your network. This overview contains the following topics: ■

Router Identification on page 118

■

Root Password on page 119

■

Time Zone and System Time on page 119

■

Network Settings on page 119

■

Default Gateway on page 120

■

Backup Router on page 120

■

Loopback Address on page 120

■

Built-In Ethernet Interface Address on page 120

■

Management Access on page 121

Router Identification The domain name defines the network or subnetwork that the Services Router belongs to. The hostname refers to the specific machine, while the domain name is shared among all the devices in a given network. Together the hostname and domain name identify the router in the network.

118

■

Basic Connectivity Overview

Chapter 7: Establishing Basic Connectivity

Root Password The root user has complete privileges to configure the Services Router, and manage files in the router's file system. Initially, the root password is not defined on the router. To ensure basic security, you must define the root password during initial configuration. If a root password is not defined, you cannot commit configuration settings to take effect on the router. If you use a plain-text password, the router displays the password as an encrypted string so that users viewing the configuration cannot easily see the password. The root password must meet the following conditions: ■

The password must be at least 6 characters long.

■

You can include most character classes in a password (alphabetic, numeric, and special characters), except control characters.

■

Valid passwords must contain at least one change of case or character class.

Time Zone and System Time You define the time zone for the location where you plan to operate the Services Router by using a designation that consists of the following information for the location: ■

Name of the continent or ocean—For example, America or Atlantic

■

Name of the major city or other geographic feature in the time zone—For example, Detroit or Azores

A Network Time Protocol (NTP) server provides accurate time across a network. The router synchronizes the system time with the NTP server, and periodically accesses the NTP server to maintain the correct time. The time zone and system time must be accurate so that the router schedules events and operations as expected.

Network Settings A Domain Name System (DNS) server on the network maintains a database for resolving hostnames and IP addresses. Network devices can query the DNS server by hostnames rather than IP addresses. The router accesses the DNS servers that are added to the configuration to resolve hostnames in the order in which you list them. If you plan to include your router in several domains, you can add these domains to the configuration so that they are included in a DNS search. When DNS searches are requested, the domain suffixes are appended to the hostnames.


■

119


Default Gateway A default gateway is a static route that is used to direct packets addressed to networks not explicitly listed in the routing table. If a packet arrives at the Services Router with an address that the router does not have routing information for, the router sends the packet to the default gateway. The default gateway entry is always present in the routing and forwarding tables.

Backup Router You can specify a backup router to take over when the routing protocol process of the Services Router is not running, usually when the Services Router is booting, or if its routing protocol process has failed. Packets arriving at a Services Router in this situation are routed to the backup router. When the routing protocol process starts up again, the address of the backup router is removed from the routing and forwarding tables of the Services Router. The backup router must be located on the same subnet.

NOTE: To configure a backup router, you must use the CLI or J-Web configuration editor. You cannot configure a backup router with J-Web Quick Configuration.

Loopback Address The loopback address is the IP address of the Services Router. The loopback address ensures that the router provides an IP address to management applications. Because it must always be available to hosts attempting to route packets to the router, the loopback address resides on an interface that is always active, known as the loopback interface (lo0.0). Setting a loopback address ensures that the router can receive packets addressed to the loopback address as long as the router is reachable though any entry (ingress) interface. In addition, applications such as NTP, RADIUS, and TACACS+ can use the loopback address as the source address for outgoing packets. If you use the J-Web Set Up Quick Configuration page, you can either set a loopback address of your choice or have the loopback address automatically set to 127.0.0.1 when you click Apply or OK to commit the configuration.

Built-In Ethernet Interface Address The built-in Gigabit Ethernet interfaces, ge-0/0/0 through ge-0/0/3, on the front panel of the Services Router, are the interfaces through which you perform initial router setup. The examples in this guide use the ge-0/0/0 interface as the management interface, but you can use any built-in Ethernet port for management. After the initial configuration is complete, you can attach the built-in Ethernet port that you are using for management purposes to the management network. Before initial configuration, when the factory default configuration is active, the router attempts to perform autoinstallation by obtaining a router configuration through all its connected interfaces, including ge-0/0/0. The Services Router acts as a DHCP client out the built-in Ethernet interfaces.

120

■



If the Services Router does not find a DHCP server within a few seconds, it sets the address of ge-0/0/0 to 192.168.1.1/24 and becomes a DHCP server out the ge-0/0/0 interface.

NOTE: If the ge-0/0/1 interface is being used, it is set to 192.168.2.1/24. With the router temporarily acting as a DHCP server, you can manually configure it with the J-Web interface. Any DHCP client host, for example, a PC or laptop computer, directly connected to ge-0/0/0 receives an address on the 192.168.1.1/24 network.

NOTE: The DHCP functionality for initial setup is different from the configurable DHCP server functionality of the Services Router during operation. To configure the Services Router as a DHCP server, see the JUNOS Software with Enhanced Services Administration Guide. Once you connect your laptop or PC to ge-0/0/0, you can use a Web browser to visit the address 192.168.1.1/24, access the J-Web Set Up Quick Configuration page, and complete the initial configuration of the router. After you perform the initial configuration and commit it by clicking Apply or OK on the Set Up page, the configured router can no longer act as a DHCP server. Therefore, to continue using ge-0/0/0 as a management interface you must configure the IP address of the interface as part of the initial configuration.

Management Access Telnet allows you to connect to the Services Router and access the CLI to execute commands from a remote system. Telnet connections are not encrypted and therefore can be intercepted. Telnet access to the root user is prohibited. You must use more secure methods, such as SSH, to log in as root. If you are using a JUNOScript server to configure and monitor routers, you can activate clear-text access on the router to allow unencrypted text to be sent directly over a TCP connection without using any additional protocol (such as SSH, SSL, or Telnet). Information sent in clear text is not encrypted and therefore can be intercepted. For more information about the JUNOScript application programming interface (API), see the JUNOScript API Guide. SSH also allows you to connect to the router and access the CLI to execute commands from a remote system. However, unlike Telnet, SSH encrypts traffic so that it cannot be intercepted. SSH can be configured so that connections are authenticated by a digital certificate. SSH uses public-private key technology for both connection and authentication. The SSH client software must be installed on the machine where the client application runs. If the SSH private key is encrypted (for greater security), the SSH client must be able to access the passphrase used to decrypt the key.


■

121


For information about obtaining SSH software, see http://www.ssh.com and http://www.openssh.com.

Before You Begin Before you begin initial configuration, complete the following tasks: ■

Install the Services Router in its permanent location, as described in “Installing and Connecting a Services Router” on page 103.

■

Gather the following information:

■

■

122

■

Before You Begin

■

Hostname for the router on the network

■

Domain that the router belongs to on the network

■

Password for the root user

■

Time zone where the router is located

■

IP address of an NTP server (if NTP is used to set the time on the router)

■

IP address of a DNS server

■

List of domains that can be appended to hostnames for DNS resolution

■

IP address of the default gateway

■

IP address to be used for the loopback interface

■

IP address of the built-in Ethernet interface that you will use for management purposes. The examples in this guide use the ge-0/0/0 interface.

If you are performing the initial configuration with the J-Web interface, collect the following equipment: ■

A management device, such as a laptop, with an Ethernet port

■

An Ethernet cable (provided)

If you are performing the initial configuration with the CLI, collect the following equipment: ■

A management device, such as a PC or laptop, with a serial port and an asynchronous terminal application (such as Microsoft Windows Hyperterminal)

■

An RJ-45 to DB-9 serial port adapter (provided)

■

An Ethernet cable (provided)

■

For a remote connection, two dial-up modems

■

For a remote modem connection, a DB-9 female to DB-25 male adapter, or other adapter appropriate for your modem (not provided)


Connecting to a Services Router You can connect to the Services Router using the J-Web or CLI interface. You can connect to the CLI from a remote location through two dial-up modems. For details see, “Connecting to the CLI Remotely” on page 126. This section contains the following topics: ■

Connecting to the J-Web Interface on page 123

■

Connecting to the CLI Locally on page 125

■

Connecting to the CLI Remotely on page 126

Connecting to the J-Web Interface If you plan to use the J-Web interface to configure the Services Router, you must connect through one of the built-in Ethernet management ports, as shown in Figure 56 on page 124 and Figure 57 on page 124. When the Services Router is powered on for the first time, the system looks for a DHCP server, and if it does not find one, it assigns an IP address within the 192.168.1.0/24 subnetwork to any devices connected to it. To connect to the J-Web interface through port 0 on the router (see Figure 56 on page 124 and Figure 57 on page 124): 1.

On the management device, such as a PC or laptop, you use to access the J-Web interface, verify that the address of the port that you connect to the router is set to one of the following: ■

An Ethernet address on the 192.168.1/24 subnetwork other than 192.168.1.1

■

An Ethernet address from a DHCP server

2.

Turn off the power to the management device.

3.

Plug one end of the Ethernet cable into the Ethernet port on the management device.

4.

Connect the other end of the Ethernet cable to the built-in Ethernet port on the router.

5.

Power on the router by pressing the power button on the front panel.

6.

Wait until the STATUS LED on the front panel turns solid green.

7.

Turn on the power to the management device. The router assigns an IP address to the management device within the 192.168.1.0/24 subnetwork if the device is configured to use DHCP.

8.

From the management device, open a Web browser and enter the IP address 192.168.1.1 in the address field. The Set Up Quick Configuration page appears.

9.

Configure basic settings for your router as described in “Configuring Basic Settings with J-Web Quick Configuration” on page 129.

Connecting to a Services Router

■

123


NOTE: You must manually configure the IP address for the management port you are using before you save your initial configuration. When you save the configuration for the first time, you will lose the connection to the router if you have not manually configured the IP address. If you lose connection through the management interface, you must connect through the console port.

Figure 56: Connecting to the Gigabit Ethernet Port on J2320 and J2350 Routers

Figure 57: Connecting to the Gigabit Ethernet Port on J4350 and J6350 Routers

124

■



Connecting to the CLI Locally If you plan to use the CLI to configure the router, you must connect through the console port, as shown in Figure 58 on page 126 and Figure 59 on page 126.

NOTE: Figure 58 on page 126 and Figure 59 on page 126 show a connection to a local management device. A remote connection to the router through a modem requires the cable and connector shown (provided in the router's accessory box), plus a DB-9 female to DB-25 male (or similar) adapter for your modem, which you must purchase separately. To connect to the CLI using a local management device through the console port on the router: 1.

Turn off power to the router.

2.

Turn off the power to the management device, such as a PC or laptop computer, that you are using to access the CLI.

3.

Plug one end of the Ethernet cable supplied with your router into the RJ-45 to DB-9 serial port adapter supplied with your router (see Figure 59 on page 126).

4.

Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management device (see Figure 59 on page 126).

5.

Connect the other end of the Ethernet cable to the console port on the router (Figure 59 on page 126).

6.

Turn on the power to the management device.

7.

Start your asynchronous terminal emulation application (such as Microsoft Windows Hyperterminal) and select the appropriate COM port to use (for example, COM1).

8.

Configure the port settings as follows:

9.

■

Bits per second: 9600

■

Data bits: 8

■

Parity: None

■

Stop bits: 1

■

Flow control: None

Power on the router by pressing the power button on the front panel. Verify that the POWER LED on the front panel turns green. The terminal emulation screen on your management device displays the boot sequence. When the router has finished booting, a login prompt appears.

10. Log in as the user root. No password is required at initial connection, but you

must assign a root password before committing any configuration settings.


■

125


Figure 58: Connecting to the Console Port on J2320 and J2350 Routers

Figure 59: Connecting to the Console Port on the J4350 and J6350 Routers

Connecting to the CLI Remotely You can connect to the CLI from a remote location through two dial-up modems: a modem that is connected to the console port on the Services Router and a second modem connected to a remote management device. The modem connection allows you to remotely perform the same console operations you can perform locally.

126

■



This section contains the following topics: ■

Configuring the Modem at the Router End on page 127

■

Connecting the Modem to the Console Port on page 128

■

Connecting to the CLI at the User End on page 128

Configuring the Modem at the Router End NOTE: These instructions use Hayes-compatible modem commands to configure the modem. If your modem is not Hayes-compatible, refer to the documentation for your modem and enter equivalent modem commands. Before you can connect a dial-up modem to the console port on the Services Router, you must configure the modem to accept a call on the first ring and accept Data Terminal Ready (DTR) signals. You must also disable flow control on the modem. To configure the modem on the router end: 1.

Connect the modem to a PC or laptop computer.

2.

Power on the modem.

3.

From the PC or laptop computer, start your asynchronous terminal emulation application (such as Microsoft Windows Hyperterminal) and select the COM port to which the modem is connected (for example, COM1).

4.


5.

■


■

Data bits: 8

■

Parity: None

■

Stop bits: 1

■

Flow control: None

In the HyperTerminal window, enter AT. An OK response verifies that the modem communicates successfully with the COM port on the PC or laptop.

6.

To configure the modem to answer a call on the first ring, enter ATS0=1.

7.

To configure the modem to accept modem control Data Terminal Ready (DTR) signals, enter AT&D1.

8.

To disable flow control, enter AT&K0.

9.

To save modem settings, enter AT&W.


■

127


Connecting the Modem to the Console Port NOTE: Most modems have an RS-232 DB-25 connector. You must separately purchase an adapter to connect your modem to the RJ-45 to DB-9 adapter and Ethernet cable supplied with the router. To connect the dial-up modem to the console port on the router: 1.

Turn off power to the router.

2.

Turn off the power to the modem.

3.

Plug one end of the Ethernet cable supplied with your router into the console port on the router.

4.

Plug the other end of the Ethernet cable into the RJ-45 to DB-9 serial port adapter supplied with your router.

5.

Connect the serial port adapter to a separately purchased DB-9 female to DB-25 male adapter, or other adapter appropriate for your modem.

6.

Plug the modem adapter into the DB-25 connector on the modem.

7.

Connect the modem to your telephone network.

8.

Turn on the power to the modem.

9.

Power on the router by pressing the power button on the front panel. Verify that the POWER LED on the front panel turns green.

Connecting to the CLI at the User End To remotely connect to the CLI through a dial-up modem connected to the console port on the router: 1.

At your remote location, connect a modem to a management device such as a PC or laptop computer.

2.

On the PC or laptop computer, start your asynchronous terminal emulation application (such as Microsoft Windows Hyperterminal).

3.

Select the COM port to which the modem is connected (for example, COM1).

4.


5.

128

■

■


■

Data bits: 8

■

Parity: None

■

Stop bits: 1

■

Flow control: None

In the HyperTerminal window, enter AT.



An OK response verifies that the modem communicates successfully with the COM port on the PC or laptop. 6.

To dial the modem that is connected to the console port on the router, enter ATDT remote-modem-number. For example, if the number of the modem connected to the console port on the router is 0013033033030, enter ATDT 0013033033030. The router login prompt appears.

7.

Log in as the user root. No password is required at initial connection, but you must assign a root password before committing any configuration settings.

Configuring Basic Settings with J-Web Quick Configuration J-Web Quick Configuration allows you to configure basic settings. Figure 60 on page 129 shows the Quick Configuration page for basic setup. Figure 60: Set Up Quick Configuration Page

Before you configure the router, gather the information described in “Before You Begin” on page 122.

Configuring Basic Settings with J-Web Quick Configuration

■

129


To configure basic settings with J-Web Quick Configuration: 1.

If you have not already done so, connect a management device to the ge-0/0/0 interface on port 0/0. For instructions, see “Connecting to the J-Web Interface” on page 123.

2.

If the Set Up Quick Configuration page is not displayed, select Configuration>Quick Configuration >Set Up.

3.

Enter information into the Set Up Quick Configuration page, as described in Table 47 on page 130.

4.

Click one of the following buttons: ■

To apply the configuration and stay in the Set Up Quick Configuration page, click Apply.

■

To apply the configuration and return to the Quick Configuration page, click OK.

■

To cancel your entries and return to the Quick Configuration page, click Cancel.

NOTE: After initial configuration is complete, the Services Router stops functioning as a DHCP server. If you change the IP address of ge-0/0/0 and have the management device configured to use DHCP, you lose your DHCP lease and your connection to the router through the J-Web interface. To reestablish a connection, either set the IP address on the management device manually, or connect ge-0/0/0 to the management network and access the router another way—for example, through the console port.

5.

To check the configuration, see the Getting Started Guide for your router.

Table 47: Set Up Quick Configuration Summary Field

Function

Your Action

Host Name (required)

Defines the hostname of the router.

Type the hostname.

Domain Name

Defines the network or subnetwork that the machine belongs to.

Type the domain name.

Root Password (required)

Sets the root password that user “root” can use to log in to the router.

Type a plain-text password that the system encrypts.

Identification

NOTE: After a root password has been defined, it is required when you log in to the J-Web user interface or the CLI. Verify Root Password (required)

Verifies the root password has been typed correctly.

Time

130

■


Retype the password.


Table 47: Set Up Quick Configuration Summary (continued) Field

Function

Your Action

Time Zone

Identifies the time zone that the router is located in.

From the list, select the appropriate time zone.

NTP Servers

Specify an NTP server that the router can reach to synchronize the system time.

To add an IP address, type it in the box to the left of the Add button, then click Add. To delete an IP address, click on it in the box above the Add button, then click Delete.

Current System Time

Synchronizes the system time with the NTP server, or manually set the system time and date.

■

To immediately set the time using the NTP server, click Set Time via NTP. The router sends a request to the NTP server and synchronizes the system time.

NOTE: If you are configuring other settings on this page, the router also synchronizes the system time using the NTP server when you click Apply or OK. ■

To set the time manually, click Set Time Manually. A pop-up window allows you to select the current date and time from lists.

Network

DNS Name Servers

Specify a DNS server that the router can use to resolve hostnames into addresses.

To add an IP address, type it in the box to the left of the Add button, then click Add. To delete an IP address, click on it in the box above the Add button, then click Delete.

Domain Search

Adds each domain name that the router is included in to the configuration so that they are included in a DNS search.

To add a domain name, type it in the box to the left of the Add button, then click Add. To delete a domain name, click on it in the box above the Add button, then click Delete.

Default Gateway

Defines a default gateway through which to direct packets addressed to networks not explicitly listed in the routing table.

Type a 32-bit IP address, in dotted decimal notation.

Loopback Address

Defines a reserved IP address that is always available on the router. If no address is entered, this address is set to 127.0.0.1/32.

Type a 32-bit IP address and prefix length, in dotted decimal notation.

ge-0/0/0 Address

Defines the IP address and prefix length of ge-0/0/0. The interface ge-0/0/0 is typically used as the management interface for accessing the router. The DHCP client sets this address to 192.168.1.1/24 if no DHCP server is found.

Type a 32-bit IP address and prefix length, in dotted decimal notation.

Allows remote access to the router using Telnet.

To enable Telnet access, select the check box.

NOTE: You must enter the ge-0/0/0 address on the Quick Configuration Set Up page before you click Apply or OK. If you do not manually configure this address, you will lose your connection to the J-Web interface when you click Apply or OK.

Management Access

Allow Telnet Access


■

131


Table 47: Set Up Quick Configuration Summary (continued) Field

Function

Your Action

Allow JUNOScript over Clear-Text Access

Allows JUNOScript to access the router using a protocol for sending unencrypted text over a TCP connection.

To enable JUNOScript access over clear text, select the check box.

Allow SSH Access

Allows remote access to the router using SSH.

To enable SSH access, select the check box.

Configuring Basic Settings Using the CLI Configuration Wizard To establish basic connectivity on a Services Router, you must identify the router, connect the router to the network, and specify basic network settings. This section explains how to use the command line interface (CLI) configuration wizard for JUNOS software with enhanced services to configure basic settings so that you can connect the router to a network and further configure it using the J-Web interface or the CLI.

NOTE: To use the CLI configuration wizard, you must have JUNOS software with enhanced services installed on your Services Router. If JUNOS software with enhanced services is not installed on your Services Router, following the instructions in“Configuring Basic Settings with J-Web Quick Configuration” on page 129 to use the J-Web Quick Configuration pages to configure basic settings or use the CLI, as described in “Configuring Basic Settings with a Configuration Editor” on page 136.

About the CLI Configuration Wizard The JUNOS software with enhanced services configuration wizard is a command line interface application that allows you to configure basic settings for a Services Router that is already configured with the factory default settings. For details on factory default settings, see the JUNOS Software with Enhanced Services Administration Guide. Understand these configuration wizard characteristics before using the wizard:

132

■

■

Because the configuration wizard overrides any existing configuration, it is meant to be used on a router configured with the factory defaults only.

■

The configuration wizard shows default values in parenthesis ( ).

■

At any time during the configuration you can type a question mark (?) to obtain Help.

■

To terminate the configuration at any time without completing it, press Ctrl+c.

■

After you complete the configuration, the wizard allows you to review it before committing it on the router.

Configuring Basic Settings Using the CLI Configuration Wizard


Using the JUNOS Software with Enhanced Services Configuration Wizard Before you use the CLI configuration wizard, log in to the Services Router console as described in “Connecting to the CLI Locally” on page 125 or “Connecting to the CLI Remotely” on page 126 To invoke the configuration wizard, enter config-wizard at the console prompt. After you invoke the wizard, it presents the following series of prompts. Follow the prompts as described in Table 48 on page 133. Table 48: Basic Configuration Wizard Summary Prompt

Function

Your Action

Enter host name:

Defines the hostname of the router.

Type the hostname. Alphanumeric, hyphen, and underline characters are allowed.

Please enter root password:

Sets the root password that user “root” can use to log into the router.

Type a plain-text password that the system encrypts.

Identification

NOTE: After a root password has been defined, it is required when you log into the J-Web user interface or the CLI. Retype root password:

Verifies that the root password has been typed correctly.

Retype the password.

Would you like to configure a domain name? [yes, no] (no):

Defines the network or subnetwork that the machine belongs to.

Type the domain name. Alphanumeric, hyphen, period, and underline characters are allowed.

If you enter y(es), the configuration wizard presents the following prompt. Enter domain name:


■

133


Table 48: Basic Configuration Wizard Summary (continued) Prompt

Function

Your Action

Would you like to configure name server? [yes, no] (no):

Defines the name server

Type the IP address of the name server.

If you enter y(es), the configuration wizard presents the following prompt: Enter IP address for the name server:

After you specify one name server, the configuration wizard presents the following prompt: Would you like to configure alternative name server? [yes, no] (no):

If you enter y(es), the configuration wizard presents the following prompt: Enter IP address for the name server: Management Interfaces

134

■




Function

Your Action

To allow you to configure the management interfaces, the configuration wizard presents the following information. To configure a specific management interface, enter the number associated with it at the prompt. Configure the following network interfaces Identifier...Interface

....1........ge-0/0/0 ....2........ge-0/0/1 ....3........ge-0/0/2 ....4........ge-0/0/3 Would you like to configure any of the above interfaces [yes, no] (yes): Please enter one or more identifiers of the interfaces separated by comma. For example, 1, 2 Please select interface identifiers:

For example, if you enter 1, the following text and prompt is displayed: Configure IP on interface ge-0/0/0 IP address for this interface:

After you enter the IP address, the configuration wizard presents the following prompt: Subnet mask bit length for this interface [1–32] (32):

After you enter the subnet mask for the interface, the configuration wizard presents the following prompt: Enter a security zone name to associate this interface to: Default Gateway Would you like to configure default gateway? [yes, no] (no):

If you enter y(es), the configuration wizard presents the following prompt:

Defines a default gateway through which to direct packets addressed to networks not explicitly listed in the routing table.

Type a 32-bit IP address, in dotted decimal notation.

Enter IP address for the default gateway: New User Account


■

135



Function

Your Action

Would you like to create a new user account? [yes, no] (no):

Defines a new (non-root) user account.

Type a username composed of only alphanumeric characters, the hyphen character, and the underscore character.

If you enter y(es), the configuration wizard displays the following prompt:

For the password, you must enter a value that is no less than 6 and no more than 128 characters long. It must contain at least 1 uppercase character and 1 lowercase character. It can include numbers and special characters.

Enter a new user name:

After you enter a username, the configuration wizard prompts you for an associated password. Enter user password

After you enter the password, the configuration wizard requests that you verify it. Retype the password: SNMP Would you like to configure SNMP Network Management? [yes,no] (no):

If you enter y(es), the configuration wizard presents the following prompt: Enter community string [public]:

Configures the Simple Network Management Protocol parameters. The SNMP community string defines the relationship between an SNMP server system and the client systems. The string serves as a password to control the client's access to the server.

Type the SNMP community string.

Configuring Basic Settings with a Configuration Editor To establish basic connectivity on a Services Router, you identify the router, connect the router to the network, and specify basic network settings. In a typical network, the Services Router has the basic settings listed in Table 49 on page 136. Determine the values to set on the Services Router in your network. Table 49: Sample Settings on a Services Router Services Router Property

Sample Value

Services Router hostname

routera

Access for user “root”

SSH RSA public key

IP address of the NTP server used to synchronize system time on the Services Router

10.148.2.21

Services Router location

Sunnyvale, California, USA, which is in the America/Los_Angeles time zone

136

■

Configuring Basic Settings with a Configuration Editor


Table 49: Sample Settings on a Services Router (continued) Services Router Property

Sample Value

IP address of the DNS server to which DNS requests are sent

10.148.2.32

Domains to which the Services Router belongs

lab.router.net and router.net

IP address of a backup router to use while the Services Router is booting or if the routing protocol processes fail to start

192.168.2.12/24

Loopback IP address and prefix length for the Services Router lo0 interface

172.16.1.24/32

IP address and prefix length for the Services Router ge-0/0/0 interface

192.168.1.1/24

You can configure basic settings in the J-Web interface from a device attached to the ge-0/0/0 interface on port 0. For instructions, see “Connecting to the J-Web Interface” on page 123. You can also connect to the CLI to configure basic settings. For instructions, see “Connecting to the CLI Locally” on page 125 and “Connecting to the CLI Remotely” on page 126. To use a configuration editor to configure basic settings: 1.

Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.

2.

To configure basic settings, perform the configuration tasks described in Table 50 on page 137.

3.

If you are using the J-Web interface, click Commit to view a summary of your changes, then click OK to commit the configuration. If you are using the CLI, commit the configuration by entering the commit command.

4.

To check the configuration, see Displaying Basic Connectivity Configurations on page 140.

Table 50: Configuring Basic Settings Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the System level in the configuration hierarchy.

1.

In the J-Web interface, select Configuration>View and Edit> Edit Configuration.

From the [edit] hierarchy level, enter

2.

Next to System, click Configure or Edit.

Define the hostname of the router.

In the Host name box, type the hostname of the router—for example, routera.

edit system

Set the hostname. For example: set host-name routera

Name the domain in which the router is located.

In the Domain name box, type the domain name of the router—for example, lab.router.net.

Set the domain name. For example: set domain-name lab.router.net


■

137


Table 50: Configuring Basic Settings (continued) Task



Allow SSH remote access.

1.

In the Nested configuration section, next to Services, click Configure or Edit.

Set remote access for SSH:

2.

Next to Ssh, click Configure or Edit.

3.

Click OK.

4.

Click OK a second time to return to the System level in the configuration editor hierarchy.

Define root authentication for access to the router.

1.

In the Nested configuration section, next to Root authentication, click Configure or Edit.

NOTE: For readability, the entire key is not shown.

2.

Next to Ssh rsa, click Add New Entry.

3.

In the Authorized key box, type the RSA password—for example, ssh-rsa AAAAB3Nza...D9Y2gXF9ac== [email protected]

Define the time zone the router is located in.

4.

Click OK.

5.


In the Time zone list, select the time zone for your router—for example, America/Los_Angeles.

set services ssh

Set the root password. For example: set root-authentication ssh-rsa “ssh-rsa AAAAB3Nza...D9Y2gXF9ac== [email protected]”

Set the time zone. For example: set time-zone America/Los_Angeles

Define the NTP server that NTP requests can be sent to.

Define the DNS server that receives DNS requests.

Add each domain that the router belongs to.

138

■

1.

In the Nested configuration section, next to Ntp, click Configure or Edit.

2.

Next to Server, click Add New Entry.

3.

In the Address box, type the NTP server's IP address—for example, 10.148.2.21

4.

Click OK.

5.


1.

Next to Name server, click Add New Entry.

2.

In the Address box, type the address of the DNS server—for example, 10.148.2.32.

3.

Click OK.

1.

Next to Domain search, click Add New Entry.

2.

In the Value box, type the name of the domain in which the router is located—for example, lab.router.net.

3.

Click OK.

4.

Next to Domain search, click Add New Entry.

5.

In the Value box, type the name of another domain that the router belongs to—for example, router.net.

6.

Click OK.


Set the address of the NTP server. For example: set ntp server 10.148.2.21

Set the address of the DNS server. For example: set name-server 10.148.2.32

Set the domains to be searched. For example: set domain-search lab.router.net set domain-search router.net


Table 50: Configuring Basic Settings (continued) Task



Define the backup router to be used when the router is booting or the routing protocol processes are not running.

In the Backup router section, next to Address, type the IP address of the backup router—for example, 192.168.2.44.

Set the address for the backup router. For example:

Define the IP address for lo0.0.

1.

In the configuration editor hierarchy, next to Interfaces, click Configure or Edit.

2.

In the Interface table, locate the lo0 row and click Unit.

3.

In the Unit table, click 0, and in the Family section next to Inet, click Configure or Edit.

4.

To delete the existing IP address, click the Discard button. Select the Delete Configuration Below This Point option button from the next display.

5.

Next to Address, click Add new entry.

6.

In the Source box, type the address and prefix length for the loopback interface—for example, 172.16.1.24/32.

7.

Click OK.

1.

In the configuration editor hierarchy, next to Interfaces, click Configure or Edit.

2.

In the Interface table, locate the ge-0/0/0 row and click Unit.

3.

In the Unit table, click 0, and in the Family section next to Inet, click Configure or Edit.

4.

To delete the existing IP address, click the Discard button. Select the Delete Configuration Below This Point option button from the next display.

Define the IP address for ge-0/0/0.

set backup router 192.168.2.44

5.

Next to Address, click Add new entry.

6.

In the Source box, type the address and prefix length for the management interface—for example, 192.168.1.1/24.

7.

Click OK.

1.

From the [edit] hierarchy level, enter edit interfaces

2.

Delete the existing IP address: delete lo0 unit 0 family inet address

3.

Set the IP address and prefix length of lo0.0. For example: set lo0 unit 0 family inet address 172.16.1.24/32

1.

Delete the existing IP address: delete ge-0/0/0 unit 0 family inet address.

2.

Set the IP address and prefix length of ge-0/0/0. For example: set ge-0/0/0 unit 0 family inet address 192.168.1.1/24

Verifying Basic Connectivity and the Configuration To verify that the Services Router has the settings you configured, perform the following task: ■

Displaying Basic Connectivity Configurations on page 140

Verifying Basic Connectivity and the Configuration

■

139


Displaying Basic Connectivity Configurations Purpose

Verify the configuration of basic connectivity. Because the basic connectivity settings appear in different places in the configuration hierarchy, displaying the entire configuration at once makes viewing the settings easier.

Action

From the J-Web interface, select Configuration>View and Edit>View Configuration Text. Alternatively, from configuration mode in the CLI, enter the show command. The following sample output displays the sample values configured in Table 50 on page 137. Your output displays the values you set. [edit] user@host# show system { host-name routera; domain-name lab.router.net; domain-search [ lab.router.net router.net ]; backup-router 192.168.2.44; time-zone America/Los_Angeles; root-authentication { ssh-rsa "ssh-rsa [email protected]"; } name-server { 10.148.2.32; } services { ssh } ntp { server 10.148.2.21; } } interfaces { ge-0/0/0 { unit 0 { family inet { address 192.168.1.1/24; } } } lo0 { unit 0 { family inet { address 172.16.1.24/32; } } } }

Meaning

Related Topics

140

■

The output shows the configuration of basic connectivity. Verify that the values displayed are correct for your Services Router. For more information about the format of a configuration file, see the JUNOS CLI User Guide.

Displaying Basic Connectivity Configurations

Chapter 8

Installing JUNOS Software with Enhanced Services For information explaining how to install JUNOS software with enhanced services if your Services Router is running JUNOS software, see the JUNOS Software with Enhanced Services Migration Guide. For information explaining how to upgrade the software if you have already installed JUNOS software with enhanced services, see the JUNOS Software with Enhanced Services Administration Guide.

■

141


142

■

Chapter 9

Configuring Secure Web Access You can manage a Services Router remotely through the J-Web interface. To communicate with the router, the J-Web interface uses Hypertext Transfer Protocol (HTTP). HTTP allows easy Web access but no encryption. The data that is transmitted between the Web browser and the router by means of HTTP is vulnerable to interception and attack. To enable secure Web access, a router supports Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS). You can enable HTTP or HTTPS access on specific interfaces and ports as needed. You can use J-Web Quick Configuration, the J-Web configuration editor, or the CLI configuration editor to configure secure Web access. This chapter contains the following topics. For more information about the J-Web interface, see the J-Web Interface User Guide. ■

Secure Web Access Terms on page 143

■

Secure Web Access Overview on page 144

■


■

Configuring Secure Web Access on page 145

■

Configuring Secure Web Access with a Configuration Editor on page 148

■

Verifying Secure Web Access on page 149

Secure Web Access Terms Before configuring secure Web access, become familiar with the terms defined in Table 51 on page 143. Table 51: Secure Web Access Terms Term

Definition

certificate authority (CA)

Third-party organization or company that issues digital certificates used to create digital signatures and public-private key pairs. The CA guarantees the identity of the individual or device that presents the digital certificate.

Hypertext Transfer Protocol (HTTP)

Protocol used to publish and receive information on the Web, such as text and graphics files.

Secure Web Access Terms

■

143


Table 51: Secure Web Access Terms (continued) Term

Definition

Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS)

Protocol similar to HTTP with an added encryption layer that encrypts and decrypts user page requests and pages that are returned by a Web server. HTTPS is used for secure communication, such as payment transactions.

Privacy-Enhanced Mail (PEM)

Technique for securely exchanging electronic mail over a public medium. PEM is based upon public key infrastructure (PKI) standards like X.509 certificates. SSL certificates are partly based on PEM and end in the suffix .pem.

RSA

Public key cipher that can be used for encrypting messages and making digital signatures. RSA uses a well-known encryption and authentication algorithm that is a part of popular Web browsers.

Secure Sockets Layer (SSL)

Protocol that encrypts security information before transmitting data across a network. SSL requires two keys to encrypt data—a public key known to everyone and a private or secret key known only to the recipient of the message—and an authentication certificate. Most popular Web browsers support SSL.

SSL certificate

Secure electronic identifier conforming to the X.509 standard, definitively identifying an individual, system, company, or organization. In addition to identification data, the digital certificate contains a serial number, a copy of the certificate holder’s public key, the identity and digital signature of the issuing certificate authority (CA), and an expiration date.

Secure Web Access Overview A Services Router uses the Secure Sockets Layer (SSL) protocol to provide secure management of Services Routers through the Web interface. SSL uses public-private key technology that requires a paired private key and an authentication certificate for providing the SSL service. SSL encrypts communication between your router and the Web browser with a session key negotiated by the SSL server certificate. An SSL certificate includes identifying information such as a public key and a signature made by a certificate authority (CA). When you access the router through HTTPS, an SSL handshake authenticates the server and the client and begins a secure session. If the information does not match or the certificate has expired, you are not able to access the router through HTTPS. Without SSL encryption, communication between your router and the browser is sent in the open and can be intercepted. We recommend that you enable HTTPS access on your WAN interfaces. On J-series Services Routers, HTTP access is enabled by default on the built-in management interfaces. By default, HTTPS access is supported on any interface with an SSL server certificate.

Before You Begin Before you begin initial configuration, complete the following tasks: ■

144

■

Establish basic connectivity. See “Establishing Basic Connectivity” on page 117.

Secure Web Access Overview

Chapter 9: Configuring Secure Web Access

■

Obtain an SSL certificate from a trusted signing authority. See “Generating SSL Certificates” on page 145.

Generating SSL Certificates To enable secure Web access, you must first generate a digital SSL certificate, and then enable HTTPS access on the Services Router. To generate an SSL certificate: 1.

Enter the following openssl command in your Secure Shell command-line interface. The openssl command generates a self-signed SSL certificate in the privacy-enhanced mail (PEM) format. It writes the certificate and an unencrypted 1024-bit RSA private key to the specified file. % openssl req –x509 –nodes –newkey rsa:1024 –keyout filename.pem -out filename.pem

Replace filename with the name of a file in which you want the SSL certificate to be written—for example, new.pem. 2.

When prompted, type the appropriate information in the identification form. For example, type US for the country name.

3.

Display the contents of the file new.pem. cat new.pem

Copy the contents of this file for installing the SSL certificate. You can use either J-Web Quick Configuration or a configuration editor to install the SSL certificate and enable HTTPS.

Configuring Secure Web Access Navigate to the Secure Access Quick Configuration page by selecting Configuration>Quick Configuration>Secure Access. On this page, you can enable HTTP and HTTPS access on interfaces for managing Services Routers through the Web interface. You can also install SSL certificates and enable JUNOScript over SSL with the Secure Access page. Figure 61 on page 146 shows the Secure Access Quick Configuration page.


■

145


Figure 61: Quick Configuration Secure Access Page

To configure Web access settings in the J-Web interface:

146

■

1.

Enter information into the Secure Access Quick Configuration page, as described in Table 52 on page 147.

2.

Click one of the following buttons: ■

To apply the configuration and stay on the Quick Configuration page, click Apply.

■

To apply the configuration and return to the Quick Configuration page, click OK.

■

To cancel your entries and return to the Quick Configuration page, click Cancel.



3.

4.

To verify that Web access is enabled correctly, connect to the router using one of the following methods: ■

For HTTP access—In your Web browser, type http://URL or http://IP address.

■

For HTTPS access—In your Web browser, type https://URL or https://IP address.

■

For SSL JUNOScript access—A JUNOScript client such as JUNOScope is required. For information about how to log in to JUNOScope, see the JUNOScope Software User Guide.

To verify the secure Web access configuration, see “Verifying Secure Web Access” on page 149.

Table 52: Secure Access Quick Configuration Summary Field

Function

Your Action

Displays digital certificates required for SSL access to the Services Router.

To add a certificate:

1.

Click Add. Opens the Add a Local Certificate page.

Allows you to add and delete SSL certificates.

2.

Type a name in the Certificate Name box—for example, new.

For information about how to generate an SSL certificate, see “Generating SSL Certificates” on page 145.

3.

Paste the generated certificate and RSA private key in the Certificate box.

Certificates

Certificates

To delete a certificate, select it and click Delete. HTTP Web Access

Enable HTTP Access

Enables HTTP access on interfaces.

To enable HTTP access, select the Enable HTTP access check box.

Enable HTTP on All Interfaces

Enables HTTP access on all interfaces at one time.

To enable HTTP access on all interfaces, select the Enable HTTP on All Interfaces check box.

HTTP-Enabled Interfaces

Specifies interfaces on which you want to enable HTTP access.

Select and deselect interfaces by clicking the direction arrows: ■

To enable HTTP access on an interface, add the interface to the HTTP Interfaces list.

■

To disable HTTP access on an interface, add the interface to the Logical Interfaces list.

HTTPS Web Access

Enable HTTPS Access

Enables HTTPS access on interfaces.

To enable HTTPS access, select the Enable HTTPS access check box.

HTTPS Certificate

Specifies SSL certificates to be used for encryption.

To specify the HTTPS certificate, select a certificate from the HTTPS Certificate list—for example, new.

This field is available only after you have created an SSL certificate.


■

147


Table 52: Secure Access Quick Configuration Summary (continued) Field

Function

Your Action

Enable HTTPS on All Interfaces

Enables HTTPS on all interfaces at one time.

To enable HTTPS on all interfaces, select the Enable HTTPS on All Interfaces check box.

HTTPS-Enabled Interfaces

Allows you to specify interfaces on which you want to enable HTTPS access.

Select and deselect interfaces by clicking the direction arrows: ■

To enable HTTPS access on an interface, add the interface to the HTTPS Interfaces list.

■

To disable HTTPS access on an interface, add the interface to the Logical Interfaces list.

JUNOScript over SSL

Enable SSL JUNOScript access

Enables secured SSL access to the JUNOScript XML scripting API.

To enable SSL access, select the Enable SSL JUNOScript access check box.

JUNOScript SSL Certificate

Specifies SSL certificates to be used for encryption.

To enable an SSL certificate, select a certificate from the JUNOScript SSL Certificate list—for example, new.

This field is available only after you create at least one SSL certificate.

Configuring Secure Web Access with a Configuration Editor You can manage your Services Router using a secure Web connection by enabling HTTPS. To enable HTTPS on your Services Router: 1.

Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.

2.

Perform the configuration tasks described in Table 53 on page 148.

3.

If you are finished configuring the router, commit the configuration.

4.

To check the configuration, see “Verifying Secure Web Access” on page 149.

Table 53: Configuring a Secure Web Access Task



Navigate to the Security level in the configuration hierarchy.

1.

From the [edit] hierarchy level, enter

2.

148

■

In the J-Web interface, select Configuration>View and Edit>Edit Configuration. Next to Security, click Configure or Edit.

Configuring Secure Web Access with a Configuration Editor

edit security


Table 53: Configuring a Secure Web Access (continued) Task



Import the SSL certificate that you have generated—for example, new.

1.

Next to Certificates, click Configure.

Enter

2.

Next to Local, click Add new entry.

3.

In the Name box, type a name for the certificate to be imported—for example, new.

For information about generating SSL certificates, see “Generating SSL Certificates” on page 145.

4.

In the Certificate box, paste the generated SSL certificate and private key.

5.

Click OK.

Enable HTTPS access and specify the SSL certificate to be used for authentication.

1.

On the main Configuration page next to System, click Configure or Edit.

2.

Select the Services check box and click Edit next to it.

Specify the port on which HTTPS access is to be enabled—for example, TCP port 8443.

3.

Next to Web management, click Edit.

4.

Select the Https check box and click Edit next to it.

5.

In the Local certificate box, type the name of the certificate—for example, new.

6.

In the Port box, type 8443.

7.

Click OK.

NOTE: You can enable HTTPS access on specified interfaces also. If you enable HTTPS without specifying an interface, HTTPS is enabled on all interfaces.

set certificates local new load-key-filepath

Replace path with a path or URL to the file containing an SSL certificate and private key in PEM format—for example, /var/tmp/new.pem

From the [edit system] hierarchy level, enter set services web-management https local-certificate new port 8443

Verifying Secure Web Access To verify that the Services Router has the secure access settings you configured, perform the following tasks: ■

Displaying an SSL Certificate Configuration on page 149

■

Displaying a Secure Access Configuration on page 150

Displaying an SSL Certificate Configuration Purpose Action

Display the SSL certificate configuration. From the J-Web interface, select Configuration>View and Edit>View Configuration Text. Alternatively, from configuration mode in the CLI, enter the show security command. The following sample output displays an SSL certificate generated with instructions in “Generating SSL Certificates” on page 145. [edit] user@R0# show security certificates {

Verifying Secure Web Access

■

149


local { new { "-----BEGIN RSA PRIVATE KEY-----\nMIICXQIBAAKBgQC/C5UI4frNqbi qPwbTiOkJvqoDw2YgYse0Z5zzVJyErgSg954T\nEuHM67Ck8hAOrCnb0YO+SY Y5rCXLf4+2s8k9EypLtYRw/Ts66DZoXI4viqE7HSsK\n5sQw/UDBIw7/MJ+OpA ... KYiFf4CbBBbjlMQJ0HFudW6ISVBslONkzX+FT\ni95ddka6iIRnArEb4VFCRh+ e1QBdp1UjziYf7NuzDx4Z\n -----END RSA PRIVATE KEY-----\n-----BEGIN CERTIFICATE----- \nMIIDjDCCAvWgAwIBAgIBADANBgkqhkiG9w0BAQQ ... FADCBkTELMAkGA1UEBhMCdXMx\nCzAJBgNVBAgTAmNhMRIwEAYDVQQHEwlzdW5ue HB1YnMxDTALBgNVBAMTBGpucHIxJDAiBgkqhkiG\n9w0BCQEWFW5iaGFyZ2F2YUB fLUYAnBYmsYWOH\n -----END CERTIFICATE-----\n"; ## SECRET-DATA } } } Meaning Related Topics

The output shows the intended secure access configuration. For more information about the format of a configuration file, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

Displaying a Secure Access Configuration Purpose Action

Verify the secure access configuration. From the J-Web interface, select Configuration>View and Edit>View Configuration Text. Alternatively, from configuration mode in the CLI, enter the show system services command. The following sample output displays the sample values for secure Web access as configured in Table 53 on page 148. [edit] user@R0# show system services web-management { http; https { port 8443; local-certificate new; } }

Meaning Related Topics

150

■

The output shows the intended secure access configuration. For more information about the format of a configuration file, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

Displaying a Secure Access Configuration

Chapter 10

Installing and Managing JUNOS Software with Enhanced Services Licenses To enable some JUNOS software with enhanced services features on a J-series Services Router, you must purchase, install, and manage separate software licenses. For those features which require a license, the presence on the router of the appropriate software license keys (passwords) determines whether you can use the feature. For information about how to purchase J-series software licenses, contact your Juniper Networks sales representative. This chapter contains the following topics: ■

JUNOS Software with Enhanced Services License Overview on page 151

■


■

Managing JUNOS Software with Enhanced Services Licenses with the J-Web Interface on page 153

■

Managing JUNOS Software with Enhanced Services Licenses with the CLI on page 155

■

Verifying JUNOS Software with Enhanced Services License Management on page 156

JUNOS Software with Enhanced Services License Overview Two JUNOS software with enhanced services features that require licenses. Each license is valid for only a single Services Router. To manage the licenses, you must understand license enforcement and the components of a license key. This section contains the following topics: ■

License Enforcement on page 151

■

Software Feature Licenses on page 152

■

License Key Components on page 152

License Enforcement For features that require a license, you must install and properly configure the license to use the feature. Although the router allows you to commit a configuration that

JUNOS Software with Enhanced Services License Overview

■

151


specifies a feature requiring a license when the license is not present, you are prohibited from actually using the feature. Successful commitment of a configuration does not imply that the required licenses are installed. If a required license is not present, the system provides a warning message after it commits the configuration rather than failing to commit it because of a license violation.

Software Feature Licenses Each feature license is tied to exactly one software feature, and that license is valid for exactly one Services Router. Table 54 on page 152 describes the Services Router software features that require licenses. Table 54: J-series Services Router Software Feature Licenses Licensed Software Feature

License Name

Traffic Analysis

J-Flow traffic analysis—all configuration statements within the [edit forwarding-options sampling] and [edit forwarding-options accounting] hierarchies.

J-series Services Router Software License for J-Flow Traffic Analysis.

BGP Route Reflectors

Advanced Border Gateway Protocol (BGP) features that enable route reflectors—all configuration statements within the [edit protocols bgp cluster] hierarchy. BGP clusters allow routers to act as route reflectors by enabling the readvertising of BGP routes to internal peers.

J-series Services Router Software License for Advanced Border Gateway Protocol Support.

License Key Components A license key consists of two parts: ■

License ID—Alphanumeric string that uniquely identifies the license key. When a license is generated, it is given a license ID.

■

License data—Block of binary data that defines and stores all license key objects.

For example, in the following typical license key, the string li29183743 is the license ID, and the trailing block of data is the license data: li29183743 4ky27y acasck 82fsj6 jzsn4q ix8i8d adj7kr 8uq38t ix8i8d jzsn4q ix8i8d 4ky27y acasck 82fsj6 ii8i7e adj7kr 8uq38t ks2923 a9382e

The license data defines the device ID for which the license is valid and the version of the license.

152

■

JUNOS Software with Enhanced Services License Overview

Chapter 10: Installing and Managing JUNOS Software with Enhanced Services Licenses

Before You Begin Before you begin managing the J-series licenses, complete the following tasks: ■

Purchase the licenses you require.

■

Establish basic connectivity. See “Establishing Basic Connectivity” on page 117.

Managing JUNOS Software with Enhanced Services Licenses with the J-Web Interface To manage licenses with the J-Web interface, you perform the following tasks: ■

Adding New Licenses with the J-Web Interface on page 154

■

Deleting Licenses with the J-Web Interface on page 154

■

Displaying License Keys with the J-Web interface on page 154

■

Downloading Licenses with the J-Web Interface on page 155

The Licenses page displays a summary of licensed features that are configured on the Services Router and a list of licenses that are installed on the routers. The information on the license management page is summarized in Table 55 on page 153. Table 55: Summary of License Management Fields Field Name

Definition

Feature Summary

Feature

Name of the licensed feature: ■

J-series licenses listed in Table 54 on page 152.

■

All features—All-inclusive licenses

Licenses Used

Number of licenses currently being used on the router. Usage is determined by the configuration on the router. If a feature license exists and that feature is configured, the license is considered used.

Licenses Installed

Number of licenses installed on the router for the particular feature.

Licenses Needed

Number of licenses required for legal of use the feature. Usage is determined by the configuration on the router: If a feature is configured and the license for that feature is not installed, a single license is needed.

Installed Licenses

ID

Unique alphanumeric ID of the license.

State

Valid—The installed license key is valid. Invalid—The installed license key is not valid.

Version

Numeric version number of the license key.

Before You Begin

■

153


Table 55: Summary of License Management Fields (continued) Field Name

Definition

Group

If the license defines a group license, this field displays the group definition. If the license requires a group license, this field displays the required group definition. NOTE: Because group licenses are currently unsupported, this field is always blank.

Enabled Features

Name of the feature that is enabled with the particular license.

Expiry

Expiration information for the license is correct. For JUNOS software with enhanced services, only permanent licenses are supported. If a license has expired, it is shown as invalid.

Adding New Licenses with the J-Web Interface To add a new license key on a Services Router with the J-Web license manager: 1.

In the J-Web interface, select Manage>Licenses.

2.

Under Installed Licenses, click Add to add a new license key.

3.

Do one of the following, using a blank line to separate multiple license keys: ■

In the License File URL box, type the full URL to the destination file containing the license key to be added.

■

In the License Key Text box, paste the license key text, in plain-text format, for the license to be added.

4.

Click OK to add the license key.

5.

Go on to “Verifying JUNOS Software with Enhanced Services License Management” on page 156.

Deleting Licenses with the J-Web Interface To delete one or more license keys from a Services Router with the J-Web license manager: 1.


2.

Select the check box of the license or licenses you want to delete.

3.

Click Delete.

4.


Displaying License Keys with the J-Web interface To display the license keys installed on a Services Router with the J-Web license manager:

154

■

Managing JUNOS Software with Enhanced Services Licenses with the J-Web Interface


1.


2.

Under Installed Licenses, click Display Keys to display all the license keys installed on the router. A screen displaying the license keys in text format appears. Multiple licenses are separated by a blank line.

3.


Downloading Licenses with the J-Web Interface To download the license keys installed on the Services Router with the J-Web license manager: 1.


2.

Under Installed Licenses, click Download Keys to download all the license keys installed on the router to a single file.

3.

Select Save it to disk and specify the file to which the license keys are to be written.

4.


Managing JUNOS Software with Enhanced Services Licenses with the CLI To manage JUNOS software with enhanced services licenses with the CLI, perform the following tasks. ■

Adding New Licenses with the CLI on page 155

■

Deleting a License with the CLI on page 156

■

Saving License Keys with the CLI on page 156

Adding New Licenses with the CLI To add a new license key to the Services Router with the CLI: 1.

Enter operational mode in the CLI.

2.

Enter one of the following CLI commands: ■

To add a license key from a file or URL, enter the following command, specifying the filename or the URL where the key is located: request system license add filename | url

■

To add a license key from the terminal, enter the following command: request system license add terminal

3.

When prompted, enter the license key, separating multiple license keys with a blank line.

Managing JUNOS Software with Enhanced Services Licenses with the CLI

■

155


If the license key you enter is invalid, an error is generated when you press Ctrl-D to exit license entry mode. 4.


Deleting a License with the CLI To delete a license key from the Services Router with the CLI: 1.


2.

Enter the following command for each license, specifying the license ID. You can delete only one license at a time. request system license delete license-id

3.


Saving License Keys with the CLI To save the licenses installed on the Services Router to a file with the CLI: 1.


2.

To save the installed license keys to a file or URL, enter the following command: request system license save filename | url

For example, the following command saves the installed license keys to a file named license.config: request system license save ftp://user@host/license.conf 3.


Verifying JUNOS Software with Enhanced Services License Management To verify license management, perform the tasks explained in these sections: ■

Displaying Installed Licenses on page 156

■

Displaying License Usage on page 157

■

Displaying Installed License Keys on page 158

Displaying Installed Licenses Purpose Action

Verify that the expected licenses are installed and active on the Services Router. From the CLI, enter the show system license command. user@router> show system license

156

■

Verifying JUNOS Software with Enhanced Services License Management


License usage: Feature name j-flow bgp-reflection

Licenses used 0 0

Licenses installed 1 1

Licenses needed 0 0

Expiry permanent permanent

Licenses installed: License identifier: G03000002223 License version: 2 Valid for device: JN001875AB Features: bgp-reflection - Border Gateway Protocol route reflection permanent License identifier: G03000002225 License version: 2 Valid for device: JN001875AB Features: j-flow - J-FLOW traffic analysis (CFLOW reporting) permanent

Meaning

The output shows a list of the license usage and a list of the licenses installed on the Services Router and when they expire. Verify the following information: ■

Each license is present. Licenses are listed in ascending alphanumeric order by license ID.

■

The feature for each license is the expected feature. The features enabled are listed by license. An all-inclusive license has All features listed.

■

All configured features have the required licenses installed. The Licenses needed column must show that no licenses are required.

■

The expiration information for the license is correct. For JUNOS software with enhanced services, only permanent licenses are supported.

Displaying License Usage Purpose Action

Verify that the licenses fully cover the feature configuration on the Services Router. From the CLI, enter the show system license usage command. user@router> show system license usage Licenses Licenses Feature name used installed j-flow 0 0 bgp-reflection 1 1

Meaning

Licenses needed 1 0

Expiry

permanent

The output shows a list of the licenses installed on the router and how they are used. Verify the following information: :

Displaying License Usage

■

157


■

Each license is present. Features are listed in ascending alphanumeric order by license name. The number of licenses is shown in the third column. Verify that the appropriate number of licenses are installed.

■

The number of used licenses matches the number of configured features. If a licensed feature is configured, the feature is considered used. The sample output shows that the BGP route reflection feature is configured.

■

A license is installed on the Services Router for each configured feature. For every feature configured that does not have a license, one license is needed. For example, the sample output shows that the user has configured the J-Flow traffic analysys feature but has not purchased the license for it. An additional license is required to be in compliance with license agreements.

■

The expiration information for the license is correct. For JUNOS software with enhanced services, only permanent licenses are supported.

Displaying Installed License Keys Purpose Action

Verify the license keys installed on the Services Router. From the CLI, enter the show system license keys command. user@router> show system license keys G03000002223 aeaqea qkjjhd ambrha 3tkqkc ayareb zicik6 nv6jck btlxao 2trfyq 65cdou r5tbbb xdarpg qq53lu qcx4vm ydakcs t3yyh2 v5mq G03000002224 aeaqea qkjjhd ambrha 3tkqkc ayargb zicik6 nv6jck btlxao 2trfyq 65cdou r5tbof l4uon5 7rokz7 wgdocl r4q32p 2wu4zf zrxa G03000002225 aeaqea qkjjhd ambrha 3tkqkc ayarab zicik6 nv6jck btlxao 2trfyq 65cdou r5tbiu jr6ui2 lmqgqj ouzq5a aiokdn 4tr4u2 wmcq

Meaning

158

■

The output shows a list of the license keys installed on the Services Router. Verify that each expected license key is present.

Displaying Installed License Keys

Part 3

Maintaining Services Router Hardware ■

Replacing Hardware Components on page 161

■

Troubleshooting a Services Router on page 199

■

Contacting Customer Support and Returning Hardware on page 205


■

159


160

■


Chapter 11

Replacing Hardware Components Because many of the Services Router's hardware components are field-replaceable units (FRUs), you can remove and replace them yourself. When you need to replace a router component, contact your customer support or sales representative to order the field-replaceable unit (FRU) that contains the component. For instructions, see “Contacting Customer Support and Returning Hardware” on page 205. This chapter contains the following topics: ■

Tools and Parts Required on page 161

■

Replacing the Console Port Cable on page 162

■

Replacing a PIM on page 162

■

Replacing PIM Cables on page 165

■

Removing and Replacing the Chassis Cover on J2320 and J2350 Routers on page 166

■

Replacing Internal Compact Flashes on J2320 and J2350 Routers on page 168

■

Replacing Internal Compact Flashes on J4350 and J6350 Routers on page 171

■

Replacing External Compact Flashes on page 174

■

Replacing USB Storage Devices on page 176

■

Replacing DRAM Modules on page 178

■

Replacing Power System Components on page 181

■

Replacing Crypto Accelerator Modules on J2320 and J2350 Routers on page 188

■

Replacing Crypto Accelerator Modules on J4350 and J6350 Routers on page 191

■

Replacing Air Filters on J2350 Routers on page 195

■

Replacing Air Filters on J4350 and J6350 Routers on page 196

Tools and Parts Required To replace hardware components, you need the tools and parts listed in Table 56 on page 162.

Tools and Parts Required

■

161


Table 56: Tools and Parts Required Tool or Part

Components

Electrostatic bag or antistatic mat

All

Electrostatic discharge (ESD) grounding wrist strap

All

Flat-blade screw-blade screwdriver, approximately 1/4 in. (6 mm)

PIM

Phillips (+) screwdriver, number 1 and number 2

■

Chassis cover

■

Compact flash

■

Crypto Accelerator Module

■

DRAM modules

■

PIM

■

Power system components

Replacing the Console Port Cable The RJ-45 port labeled CONSOLE on the Services Router's front panel allows you to connect the router to an external management device, such as a laptop or a terminal server. For cable specifications, see “Chassis Console Port Pinouts” on page 226. To replace the console port cable: 1.

Locate an appropriate replacement cable and connector.

2.

Plug the Ethernet connector at either end of the cable into the console port on the front panel (see Figure 59 on page 126).

3.

Plug the connector at the other end of the cable into the external management device. If you are connecting to a DB-9 serial port, use the provided RJ-45 to DB-9 serial port adapter.

Replacing a PIM To remove or install field-replaceable Physical Interface Modules (PIMs) in a Services Router, you must first power off the router. This section contains the following topics: ■

Removing a PIM on page 162

■

Installing a PIM on page 164

Removing a PIM The PIMs are installed in the front of the Services Router. A PIM weighs less than 1 lb (0.5 kg).

162

■

Replacing the Console Port Cable

Chapter 11: Replacing Hardware Components

CAUTION: Do not hot-swap WXC Integrated Services Modules. Failure to power off the router before removing or installing a WXC Integrated Services Module might result in damage to the hardware.

Figure 62: Removing a PIM

To remove a PIM (see Figure 62 on page 163): 1.

Place an electrostatic bag or antistatic mat on a flat, stable surface to receive the PIM.

2.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect the strap to the ESD point on the chassis, or to an outside ESD point if the Services Router is disconnected from earth ground. For more information about ESD, see “Preventing Electrostatic Discharge Damage” on page 237.

3.

Press and release the power button to power off the router. Verify that the POWER LED blinks and then turns off.

4.

Label the cables connected to the PIM so that you can later reconnect each cable to the correct PIM.

5.

Disconnect the cables from the PIM.

6.

If necessary, arrange the cables to prevent them from dislodging or developing stress points: ■

Secure each cable so that it is not supporting its own weight as it hangs to the floor.

■


■

Use fasteners to maintain the shape of cable loops.

7.

Loosen the captive screws on each side of the PIM faceplate.

8.

Grasp the handles on each side of the PIM faceplate, and slide the PIM out of the router. Place it in the electrostatic bag or on the antistatic mat.

9.

If you are not reinstalling a PIM into the emptied slot, install a blank PIM panel over the slot to maintain proper airflow.

Replacing a PIM

■

163


Installing a PIM CAUTION: Do not hot-swap WXC Integrated Services Modules. Failure to power off the router before removing or installing a WXC Integrated Services Module might result in damage to the hardware.

Figure 63: Installing a PIM

CAUTION: Do not install a combination of modules in a single chassis that exceeds the maximum power and heat capacity of the chassis. If J-series power management is enabled, PIMs and modules (PIMs or PIMs plus a WXC Integrated Services Module) that exceed the maximum power and heat capacity remain offline when the chassis is powered on. To verify that the combination of PIMs to be installed in a chassis do not exceed the power and heat capacities for the J4350 or J6350 router, see “Planning for Power Management” on page 98. To install a PIM (see Figure 63 on page 164): 1.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect the strap to the ESD point on the chassis, or to an outside ESD point if the Services Router is disconnected from earth ground. For more information about ESD, see “Preventing Electrostatic Discharge Damage” on page 237.

2.

Press and release the power button to power off the router. Verify that the POWER LED blinks and then turns off.

3.

Align the notches in the connector at the rear of the PIM with the notches in the PIM slot in the Services Router, and slide the PIM in until it lodges firmly in the router.

CAUTION: Slide the PIM straight into the slot to avoid damaging the components on the PIM.

4.

164

■

Replacing a PIM

Tighten the captive screws on each side of the PIM faceplate.


5.

Insert the appropriate cables into the cable connectors on the PIM.

6.

If necessary, arrange the cables to prevent them from dislodging or developing stress points:

7.

■

Secure each cable so that it is not supporting its own weight as it hangs to the floor.

■


■


Press and release the power button to power on the router. Verify that the POWER LED lights steadily.

Replacing PIM Cables Removing and installing PIM cables does not affect Services Router function, except that a PIM does not receive or transmit data while its cable is disconnected. To replace a PIM cable, perform the following procedures: ■

Removing PIM Cables on page 165

■

Installing PIM Cables on page 165

Removing PIM Cables To remove a PIM cable: 1.

If you are removing all cables connected to the PIM, issue the following CLI command to take the PIM offline: user@host> request chassis fpc slot

pim-slot offline

For example, to take the PIM in slot 4 offline, enter the following command: user@host> request chassis fpc slot 4 offline

For more information about the command, see the JUNOS System Basics and Services Command Reference. 2.

Unplug the cable from the cable connector port.

3.

Detach the cable from the destination port.

Installing PIM Cables To install a PIM cable: 1.

Have ready a length of the type of cable used by the PIM. For cable specifications, see “Network Cable Specifications and Connector Pinouts” on page 215.

2.

Insert the cable connector into the cable connector port on the PIM faceplate.

Replacing PIM Cables

■

165


3.

Arrange the cable as necessary to prevent it from dislodging or developing stress points: ■

Secure the cable so that it is not supporting its own weight as it hangs to the floor.

■


■


4.

Insert the other end of the cable into the destination port.

5.

Repeat the previous steps for any additional cables.

6.

If the PIM is offline (its status LED is steadily red), issue the following CLI command to bring the PIM online: user@host> request chassis fpc slot pim-slot online

For example, to bring the PIM in slot 4 online, enter the following command: user@host> request chassis fpc slot 4 online

For more information about the command, see the JUNOS System Basics and Services Command Reference. 7.

Verify that the PIM status LED shines steadily green to confirm that the PIM is online. You can also verify correct PIM functioning by issuing the show chassis fpc pic-status command described in the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

NOTE: In the show chassis fpc pic-status command, the PIM slot number is reported as an FPC number and the PIM number (always 0) is reported as a PIC number. For more information about interface naming, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

Removing and Replacing the Chassis Cover on J2320 and J2350 Routers On J2320 and J2350 routers, the chassis cover fits tightly on the chassis. To remove the cover from the chassis:

166

■

1.

Press and release the power button to power off the router. Wait for the POWER LED to turn off.

2.

Remove the power cable from the power source receptacle.

3.

With a Phillips screwdriver remove the grounding screw.

4.

Remove the router from the rack.

Removing and Replacing the Chassis Cover on J2320 and J2350 Routers


5.

With a Phillips screwdriver remove the flat head screws from the rear and sides of the chassis.

6.

Position the router so that you face the front panel.

7.

Place your hands on the cover and press down while pushing the cover back until the two front tabs disengage from the chassis base (see Figure 64 on page 167).

Figure 64: Sliding the Chassis Cover

8.

Lift the cover upward and pull it away from the tabs on the rear of the chassis (see Figure 65 on page 167).

Figure 65: Removing and Replacing the Chassis Cover

To replace the cover on the J2320 and J2350 chassis: 1.

Lower the cover onto the chassis so that the front edge of the cover is a few inches away from the front edge of the chassis base (see Figure 65 on page 167).

2.

Tilt the cover and align the rear tabs with the slots at the bottom of the chassis (see Figure 66 on page 168).

Removing and Replacing the Chassis Cover on J2320 and J2350 Routers

■

167


Figure 66: Matching the Chassis Slots and Tabs

3.

Lower the cover fully onto the base, and slide it so that the front tabs match the front slots and the chassis cover and base edges align completely.

4.

Insert and tighten the flat head screws with a Phillips screwdriver.

5.

Return the router to its installation site, and attach the grounding cable and the power cables. (See “Connecting Power” on page 110.)

6.


Replacing Internal Compact Flashes on J2320 and J2350 Routers The internal compact flash provides primary storage for the router and is installed in a slot on the bottom of the J2320 or J2350 chassis (see Figure 67 on page 169). It can accommodate software images, configuration files, and microcode. For information about configuring the internal compact flash, see the JUNOS Software with Enhanced Services Administration Guide.

NOTE: Use only compact flash cards purchased from Juniper Networks for your J-series platform and model.

168

■

Replacing Internal Compact Flashes on J2320 and J2350 Routers


Figure 67: Location of J2320 and J2350 Internal Compact Flash

To replace the internal compact flash: 1.

Place an electrostatic bag or antistatic mat on a flat, stable surface.

2.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect the strap to the ESD point on the chassis, or to an outside ESD point if the router is disconnected from earth ground. For more information about ESD, see “Preventing Electrostatic Discharge Damage” on page 237.

3.


4.

Remove the power cable from the power source receptacle.

5.

Remove chassis cover. (See “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

WARNING: If the fans are still rotating, wait until they stop before proceeding with the next step.

6.

With a Phillips screwdriver, loosen the pan head screws that secure the internal compact flash slot cover.

7.

Remove the compact flash slot cover.

8.

Gently grasp the compact flash, and slide it out of the compact flash slot (see Figure 68 on page 170).


■

169


Figure 68: Removing the J2320 or J2350 Internal Compact Flash

9.

Place the compact flash on the antistatic mat or in the electrostatic bag.

10. With the vendor name and memory size facing up and the arrow pointing towards

the router, insert the new compact flash into the compact flash slot (see Figure 69 on page 170). Figure 69: Inserting the J2320 or J2350 Internal Compact Flash

11. Replace the compact flash slot cover. 12. Tighten the pan head screws that secure the compact flash slot cover. 13. Slide the chassis cover onto the chassis. 14. Replace the chassis cover. (See “Removing and Replacing the Chassis Cover on

J2320 and J2350 Routers” on page 166.) 15. Replace the power cable. 16. Press and release the power button to power on the router. Verify that the POWER

LED lights steadily.

170

■



Replacing Internal Compact Flashes on J4350 and J6350 Routers The internal compact flash is installed in a slot on the bottom of the J4350 or J6350 chassis (see Figure 70 on page 171).

NOTE: Use only compact flash cards purchased from Juniper Networks for your J-series platform and model.

Figure 70: Location of J4350 and J6350 Compact Flash

On some J4350 and J6350 Services Routers, the compact flash is in a horizontal position, while on others it is in a vertical position. Figure 71 on page 172 shows the alternative horizontal orientation of the compact flash.


■

171


Figure 71: Alternative Horizontal Orientation of J4350 and J6350 Compact Flash

To replace the compact flash: 1.


2.


3.


4.

Remove the power cord or cable from the power source receptacle.

5.

Remove the screws from the sides and top of the chassis that secure the cover to the chassis.

6.

Slide the cover off the chassis.

WARNING: If the fans are still rotating, wait until they stop before proceeding with the next step, especially if your compact flash is in the horizontal position (flat against the system board).

7.

172

■

Slide the compact flash out of its slot, as shown in Figure 72 on page 173.



Figure 72: Removing the J4350 or J6350 Compact Flash

8.


9.

Slide the new compact flash into the slot and press down, as shown in Figure 73 on page 173.

Figure 73: Inserting the J4350 or J6350 Compact Flash

NOTE: On some Services Routers the compact flash is in a horizontal position. If the compact flash connection is horizontal, lay the compact flash behind the slot and slide it forward until it clicks into place. 10. Slide the cover onto the chassis. 11. Replace and tighten the screws on the sides and top of the chassis that secure

the cover to the chassis.


■

173


12. Replace the power cord or cable. 13. Press and release the power button to power on the router. Verify that the POWER


Replacing External Compact Flashes The external compact flash is an optional component on J2320 and J2350 Services Routers. It provides secondary storage for the router and can accommodate software images, configuration files, and microcode. If the internal compact flash fails on startup, the router boots from the external compact flash. For information about configuring the external compact flash, see the JUNOS Software with Enhanced Services Administration Guide.

NOTE: Depending on your configuration, the Services Router might not have an external compact flash. If no external compact flash is installed, proceed directly to Step 10 to install the compact flash. The external compact flash is installed in a slot on the rear of the J2320 or J2350 chassis. To replace the external compact flash: 1.

Verify the device that the router used to boot by running the show system storage command from the CLI. For example: user@host> show system storage Filesystem /dev/ad0s1a ...

512-blocks 218254

Used 175546

Avail Capacity Mounted on 40526 81% /

The boot device is mounted on /. The internal compact flash is located at ad0. The external compact flash is located at ad2. The USB storage device is located at da0. This example shows that the router booted from the internal compact flash. If the show system storage output indicates that the router booted from the external compact flash, you need to power off the router before replacing the compact flash.

174

■

2.


3.


4.

Press and release the power button to power off the router. Wait for the POWER LED to turn off before you remove the compact flash.

Replacing External Compact Flashes


Skip this step, if the router did not boot from the external compact flash (see step 1). 5.

With a Phillips screwdriver, loosen the pan head screws that secure the external compact flash cover to the rear of the chassis (see Figure 74 on page 175).

Figure 74: Removing the External Compact Flash Cover

6.

Remove the compact flash cover.

7.

Eject the external compact flash by pressing the ejector button to the left of the compact flash slot once to unlock the button, and again to eject the compact flash (see Figure 75 on page 175).

Figure 75: Removing the External Compact Flash

8.

Gently grasp the compact flash, and slide it out of the slot.

9.


10. With the vendor name and memory size facing up and the arrow pointing towards

the router, insert the new compact flash in the external compact flash slot (see Figure 76 on page 175). Figure 76: Inserting the External Compact Flash

11. Replace the compact flash slot cover.

Replacing External Compact Flashes

■

175


12. Tighten the pan head screws that secures the compact flash slot cover to the

rear of the chassis. 13. Plug the power cord into the power supply. 14. Press and release the power button to power on the router. Verify that the POWER


Replacing USB Storage Devices USB storage devices are optional components on J-series Services Routers. If installed, a USB storage device provides secondary storage for the router. It can accommodate software images, configuration files, and microcode. If the internal compact flash fails on startup, and the external compact flash is not installed or fails, the router boots from the USB storage device. For information about configuring the USB storage device, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide.

NOTE: For a list of supported USB storage devices, see the JUNOS Software with Enhanced Services Release Notes at http://www.juniper.net. To remove and install a USB storage device, perform the following procedures: ■

Removing the USB Storage Device on page 176

■

Installing the USB Storage Device on page 177

Removing the USB Storage Device NOTE: Depending on your configuration, the Services Router might not have a USB storage device. If no USB storage device is installed, proceed directly to “Installing the USB Storage Device” on page 177. The USB storage device is installed into the USB port on the front panel of the Services Router. To remove the USB storage device:

176

■

Replacing USB Storage Devices


1.

Verify the device that the router used to boot, by running the show system storage command from the CLI. For example: user@host> show system storage Filesystem /dev/ad0s1a ...

512-blocks 218254

Used 175546

Avail Capacity Mounted on 40526 81% /

The boot device is mounted on /. The internal compact flash is located at ad0. The external compact flash is located at ad2. The USB storage device is located at da0. This example shows that the router booted from the internal compact flash. If the show system storage output indicates that the router booted from the external compact flash, you need to power off the router before replacing the compact flash. 2.


3.


4.

Press and release the power button to power off the router. Wait for the POWER LED to turn off before you remove the compact flash. Skip this step, if the router did not boot from the external compact flash (see Step 1).

5.

Gently grasp the USB storage device and slide it out of the USB port.

6.

Place the USB storage device on the antistatic mat or in the electrostatic bag.

Installing the USB Storage Device To install the USB storage device:


1.


2.

Orient the USB storage device with the USB port on the front panel of the router.

Replacing USB Storage Devices

■

177


3.

Insert the USB storage device into the USB port. If the USB storage device does not easily slide into the port, it might not be oriented correctly. Turn the USB storage device upside-down and try again.

4.

To configure the USB storage device with the request system snapshot command, see the JUNOS Software with Enhanced Services Administration Guide.

Replacing DRAM Modules The DRAM installed on the Routing Engine provides storage for the routing and forwarding tables and for other Routing Engine processes. The design of the Routing Engine allows you to modify the DRAM configuration by adding DRAM modules to the system board, or removing DRAM modules from the board. The DRAM modules are located on the top of the system board, as shown in Figure 77 on page 178 and Figure 78 on page 179. Two pairs of slots are available for installing DRAM modules. Installing DRAM modules in slots away from each other provides better performance than installing them in two adjacent slots.

NOTE: Use only DRAM modules purchased through Juniper Networks specifically for your model.

Figure 77: J2320 and J2350 DRAM Location

178

■

Replacing DRAM Modules


Figure 78: J4350 and J6350 DRAM Location

To modify the DRAM configuration, use the following procedures: ■

Removing a DRAM Module on page 179

■

Installing a DRAM Module on page 180

Removing a DRAM Module To remove a DRAM module: 1.


2.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect the strap to the ESD point on the chassis, or to an outside ESD point if the router is disconnected from earth ground. For more information about ESD, see the Getting Started Guide for your router.

3.


4.

Unplug the power cord or cable from the power source receptacle.

5.


6.

Slide the cover off the chassis. (For J2320 and J2350 routers, see “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

7.

To release the DRAM module, press the plastic ejectors on both sides of the module (see Figure 79 on page 180).

8.

Grasp the DRAM module, being careful not to touch any electrical components on the module, and firmly pull it out of the slot on the system board.

9.

Place the DRAM module on the antistatic mat or in the electrostatic bag.


■

179


Figure 79: Installing or Replacing DRAM Modules

Installing a DRAM Module J2320, J2350, J4350 and J6350 Services Routers support 256-MB and 512-MB DRAM modules. Use only DRAM modules purchased from Juniper Networks specifically for your model.

NOTE: If you are installing a second DRAM module, do not install it in a slot adjacent to the first module. For example, if the first DRAM module is installed in slot 1, install the second module in slot 3 (see Figure 77 on page 178 and Figure 78 on page 179). To install a DRAM module: 1.

180

■

Take the following steps if you have not already done so: a.

Attach an electrostatic discharge (ESD) grounding strap to your bare wrist and connect the strap to the ESD point on the chassis, or to an outside ESD point if the router is disconnected from earth ground. For more information about ESD, see the Getting Started Guide for your router.

b.


c.


d.


e.

Slide the cover off the chassis. (For J2320 and J2350 routers, see “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

2.

Remove the DRAM module from its electrostatic bag.

3.

Press the plastic ejectors on both sides of the DRAM slot to open it (see Figure 79 on page 180).

4.

Grasp the DRAM module by the edges, being careful not to touch any electrical components.



5.

Pressing firmly on both ends, push the module into the slot until the ejectors click into the closed position (see Figure 79 on page 180).

6.

Slide the cover onto the chassis.

7.

Replace and tighten the screws on the sides and top of the chassis that secure the cover to the chassis.

8.

Replace the power cord or cable.

9.


10. To view the DRAM configuration and verify that it was installed correctly, issue

the show chassis routing-engine command, described in the JUNOS System Basics and Services Command Reference. This command shows the total memory installed.

Replacing Power System Components The power cords on all Services Routers are replaceable. You can add a second power supply to the J6350 Services Router that is of the same type as the first (either AC or DC). The power supplies are located at the right rear of the chassis (see Figure 15 on page 22 and Figure 17 on page 23). Each J6350 power supply provides power to all components in the router. The J6350 power supplies are fully redundant. If one power supply fails or is removed, the remaining power supply instantly assumes the entire electrical load. One power supply can provide full power for as long as the router is operational. Each J6350 power supply is hot-insertable and hot-removable.

CAUTION: Do not leave a power supply slot empty for more than a short time while the Services Router is operational. The power supply or a blank power supply panel must remain in the chassis for proper airflow. To replace power system components, use the following procedures: ■

Replacing AC Power Supply Cords on page 181

■

Removing an AC Power Supply from J6350 Routers on page 182

■

Installing an AC Power Supply in J6350 Routers on page 183

■

Replacing DC Power Supply Cables on page 184

■

Removing a DC Power Supply on page 185

■

Installing a DC Power Supply on page 186

Replacing AC Power Supply Cords To replace the AC power cord for a redundant power supply:

Replacing Power System Components

■

181


1.

Locate a replacement power cord with the type of plug appropriate for your geographical location (see “AC Power, Connection, and Power Cord Specifications” on page 95).

2.


3.


NOTE: If the power supply is a redundant power supply in a J6350 Services Router, you can leave the router powered on and power flowing in the other power supply.

4.

Unplug the power cord from the power source receptacle.

5.

Unplug the power cord from the appliance inlet on the power supply faceplate.

6.

Insert the appliance coupler end of the replacement power cord into the appliance inlet on the power supply faceplate.

7.

Insert the power cord plug into an AC power source receptacle.

NOTE: Each power supply must be connected to a dedicated AC power feed. For information about connecting to AC power sources, see “Connecting Power” on page 110.

8.

Verify that the power cord does not block access to Services Router components or drape where people might trip on it.

9.


Removing an AC Power Supply from J6350 Routers The power supplies are located at the right rear of the chassis. A power supply weighs 2.4 lb (1.1 kg). To remove an AC power supply from a J6350 Services Router (see Figure 80 on page 183):

182

■

1.


2.

Press and release the power button to power off the Services Router. Wait for the POWER LED to turn off.



NOTE: If the power supply is a redundant power supply in a J6350 Service Router, you can leave the router powered on and power flowing in the other power supply.

3.

Unplug the power cord from the power source receptacle.

4.

Unplug the power cord from the appliance inlet on the power supply faceplate.

5.

Slide the ejector tab on the power supply faceplate to the right and hold it in place to unlock the power supply.

6.

Grasp the handle on the power supply faceplate, and pull firmly to start removing the power supply. Slide it halfway out of the chassis (see Figure 80 on page 183).

7.

Place one hand underneath the power supply to support it and slide it completely out of the chassis.

8.

If you are not reinstalling a power supply into the emptied slot, install a blank power supply panel over the slot.

Figure 80: Removing an AC Power Supply

Installing an AC Power Supply in J6350 Routers To install an AC power supply in a J6350 Services Router (see Figure 81 on page 184): 1.


2.

Using both hands, slide the power supply into the chassis until you feel resistance.

3.

Firmly push the power supply into the chassis until it comes to a stop. Make sure that the power supply faceplate is flush with any adjacent power supply faceplate.

4.

Insert the appliance coupler end of a power cord into the appliance inlet on the power supply faceplate.

5.

Insert the power cord plug into an AC power source receptacle.


■

183


NOTE: Each power supply must be connected to a dedicated AC power feed. For information about connecting to AC power sources, see “Connecting Power” on page 110.

6.

Verify that the power cord does not block access to router components or drape where people might trip on it.

7.


Figure 81: Installing an AC Power Supply

Replacing DC Power Supply Cables To replace a power cable for a DC power supply: 1.

Locate a replacement power cable and a lug that meet the specifications defined in “Chassis Grounding” on page 109 and “DC Power, Connection, and Power Cable Specifications” on page 97.

CAUTION: A licensed electrician must attach a cable lug to the power cable that you supply. A cable with an incorrectly attached lug can damage the router (for example, by causing a short circuit).

184

■

2.


3.


4.

Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads cannot become active during installation.




5.

Remove the power cable from the DC power source.

6.


7.

Within the terminal block, remove the screw that fastens the power cable lug to the terminal block.

8.

Carefully move the power cable out of the way.

9.

Using the removed screw, secure the replacement power cable (see 1) to the appropriate terminal. Tighten the screw until snug. Do not overtighten. The screw contains a captive washer used to secure the power cable lug to the terminal block.

NOTE: Each power supply must be connected to a dedicated DC power feed. For information about connecting to DC power sources, see “Connecting Power” on page 110. 10. Dress the power cable appropriately. 11. Replace the clear plastic cover over the terminal block. 12. Verify that the power cable does not block access to router components or drape

where people might trip on it. 13. Press and release the power button to power on the router. Verify that the POWER


Removing a DC Power Supply The power supplies are located at the right rear of the chassis. A power supply weighs 2.4 lb (1.1 kg). To remove a DC power supply (see Figure 82 on page 186): 1.


2.


3.



■

185



4.

Remove the power cables from the DC power source.

5.


6.

Within the terminal block, remove the screws that fasten the power cable lugs to the terminal block.

7.

Carefully move the power cables out of the way.

8.

Slide the ejector tab on the power supply faceplate to the right, and hold it in place to unlock the power supply.

9.

Grasp the handle on the power supply faceplate, and pull firmly to start removing the power supply. Slide it halfway out of the chassis (see Figure 82 on page 186).

10. Place one hand underneath the power supply to support it, and slide it completely

out of the chassis. 11. If you are not reinstalling a power supply into the emptied slot, install a blank

power supply panel over the slot.

Figure 82: Removing a DC Power Supply

Installing a DC Power Supply Each power supply in a DC-powered router must be connected to earth ground. A ground terminal is provided on each DC power supply for this purpose. To install a DC power supply (see Figure 83 on page 188):

186

■



1.



2.


3.

Using both hands, slide the power supply into the chassis until you feel resistance.

4.

Firmly push the power supply into the chassis until it comes to a stop. Make sure that the power supply faceplate is flush with any adjacent power supply faceplate.

5.


6.

Within the terminal block, remove the two center screws next to the labels –48 VDC and RTN. Each screw contains a captive washer to secure a power cable lug to the terminal block.

7.

Using one of the removed screws, secure the positive (+) DC source power cable lug to the RTN terminal. Tighten the screw until snug. Do not overtighten. Apply between 8 lb-in. (0.9 Nm) and 9 lb-in. (1.02 Nm) of torque to the screw.

8.

Using the other removed screw, secure the negative (–) DC source power cable lug to the –48 VDC terminal. Tighten the screw until snug. Do not overtighten. Apply between 8 lb-in. (0.9 Nm) and 9 lb-in. (1.02 Nm) of torque to the screw.

NOTE: Each power supply must be connected to a dedicated DC power feed. For information about connecting to DC power sources, see “Connecting Power” on page 110.

9.

Dress the power cables appropriately.

10. Replace the clear plastic cover over the terminal block. 11. Verify that the power cord does not block access to router components or drape

where people might trip on it. 12. Press and release the power button to power on the router. Verify that the POWER



■

187


Figure 83: Installing a DC Power Supply

Replacing Crypto Accelerator Modules on J2320 and J2350 Routers The Crypto Accelerator Module is a processor card that enhances performance of cryptographic algorithms used in IP security (IPSec) services. The Crypto Module is an optional feature on J2320 and J2350 Services Routers. Figure 84 on page 188 shows the location of the Crypto Accelerator Module on J2320 and J2350 routers. Figure 84: Crypto Accelerator Module Location on J2320 and J2350 Routers

To remove or install a Crypto Accelerator Module, use the following procedures:

188

■

■

Removing a J2320 or J2350 Crypto Accelerator Module on page 189

■

Installing a J2320 or J2350 Crypto Accelerator Module on page 190

Replacing Crypto Accelerator Modules on J2320 and J2350 Routers


Removing a J2320 or J2350 Crypto Accelerator Module NOTE: If you are installing a Crypto Accelerator Module into a J2320 or J2350 Services Router for the first time, proceed directly to “Installing a J2320 or J2350 Crypto Accelerator Module” on page 190. To remove the Crypto Accelerator Module: 1.

Place an electrostatic bag or antistatic mat on a flat stable surface to receive the Crypto Module.

2.


3.


4.


5.

Remove the chassis cover. (See “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

6.

Locate the Crypto Module on the system board (see Figure 84 on page 188).

7.

Using a Phillips screwdriver, remove the three screws from top of the Crypto Accerator Module, as shown in Figure 85 on page 189.

Figure 85: Removing a J2320 or J2350 Crypto Module

8.

Gently lift the Crypto Module to disengage it from the connector on the system board, as shown in Figure 85 on page 189.

9.

Place the Crypto Module on the antistatic mat or in the electrostatic bag.


■

189


Installing a J2320 or J2350 Crypto Accelerator Module To install a Crypto Accelerator Module: 1.



b.


c.


d.

Remove the chassis cover. (See “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

2.

Locate the Crypto Module connector on the system board (see Figure 86 on page 190).

3.

Remove the Crypto Module from its electrostatic bag.

4.

Align the notches in the Crypto Module with the notches in the connector on the system board and push the Crypto Module down flat, as shown in Figure 86 on page 190.

Figure 86: Installing a J2320 or J2350 Crypto Accelerator Module

190

■

5.

Insert the three screws and tighten them until snug. Do not overtighten.

6.

Replace the chassis cover. (See “Removing and Replacing the Chassis Cover on J2320 and J2350 Routers” on page 166.)

7.




8.


9.

Verify that the Crypto Module is correctly installed by issuing the show chassis hardware command, as shown in the following example: user@host> show chassis hardware user@host> show chassis hardware Hardware inventory: Item Version Part number Chassis Midplane REV 00 710-012339 System IO REV 00 710-012315 Crypto Module Acceleration Routing Engine REV 00 710-012149 FPC 0 PIC 0 Power Supply 0

Serial number JN1086AA8ADA NE0664 NE3564

Description J4350 JX350 System IO Crypto RE-J4350-2540 FPC 4x GE Base PIC

If Crypto Module appears in the output, the Crypto Accelerator Module is installed correctly.

Replacing Crypto Accelerator Modules on J4350 and J6350 Routers The Crypto Accelerator Module is a processor card that enhances performance of cryptographic algorithms used in IP security (IPSec) services. The Crypto Module is a standard feature on J6350 Services Routers and an optional feature on the J4350 Services Routers. Figure 87 on page 192 shows the location of the Crypto Accelerator Module.


■

191


Figure 87: Crypto Accelerator Module Location on J4350 and J6350 Routers

To modify a Crypto Accelerator Module configuration, use the following procedures: ■

Removing a J4350 or J6350 Crypto Accelerator Module on page 192

■

Installing a J4350 or J6350 Crypto Accelerator Module on page 194

Removing a J4350 or J6350 Crypto Accelerator Module NOTE: If you are installing a Crypto Accelerator Module into a J4350 Services Router for the first time, proceed directly to “Installing a J4350 or J6350 Crypto Accelerator Module” on page 194. To remove the Crypto Accelerator Module:

192

■

1.

Place an electrostatic bag or antistatic mat on a flat stable surface to receive the Crypto Module.

2.


3.


4.


5.

Remove the screws from the sides and the top of the chassis, and slide the cover off the chassis.



6.

Locate the Crypto Module on the system board (see Figure 87 on page 192).

7.

Using a Phillips screwdriver remove the screw, as shown in Figure 88 on page 193.

Figure 88: Removing a J4350 or J6350 Crypto Module Screw

8.

Pull the white release clips on either side of the Crypto Module out to either side, as shown in Figure 89 on page 193, to tilt the Crypto Module upward.

Figure 89: Removing and Installing a J4350 or J6350 Crypto Accelerator Module

9.

Slide the Crypto Module out of its socket.

10. Remove the standoff washer that was under the Crypto Module. 11. Place the Crypto Module on the antistatic mat or in the electrostatic bag.


■

193


Installing a J4350 or J6350 Crypto Accelerator Module To install a Crypto Accelerator Module: 1.



b.


c.


d.

Remove the screws from the sides and the top of the chassis, and slide the cover off the chassis.

2.

Locate the Crypto Module socket on the system board (see Figure 87 on page 192). The socket is tipped up at an angle when empty.

3.

If a screw and standoff washer are already in place (see Figure 88 on page 193), remove them.

4.

Remove the Crypto Module from its electrostatic bag and insert it into the socket.

5.

Push the Crypto Module down flat against the main board until the release clips click into place, as shown in Figure 89 on page 193.

6.

Insert the standoff washer under the Crypto Module.

7.

Insert the screw and tighten it until snug. Do not overtighten.

8.

Slide the cover onto the router, and replace and tighten the cover screws.

9.


10. Press and release the power button to power on the router. Verify that the POWER

LED lights steadily. 11. Verify that the Crypto Module is correctly installed by issuing the show chassis

hardware command, as shown in the following example: user@host> show chassis hardware Hardware inventory: Item Version Chassis Midplane REV 00 System IO REV 00 Routing Engine REV 00 Crypto Module acceleration FPC 0 PIC 0

Part number 710-014594 710-012315 710-012149

Serial number JN1086A34ADA

Description J4350 JX350 System IO RE-J4350-2540 Crypto FPC 4x GE Base PIC

If Crypto Module appears in the output, the Crypto Accelerator Module is installed correctly.

194

■



Replacing Air Filters on J2350 Routers The cooling fans on J2350 routers draw air through vents along the left side of the chassis and exhaust it through vents on the right side of the chassis. For more information, see “J2320 and J2350 Cooling System” on page 19. On J2350 routers that comply with Network Equipment Building System (NEBS) criteria, the air intake grid contains a filter. To verify that the system is a NEBS-compliant system, run the show chassis hardware command. A NEBS-compliant system displays the term NEBS in the output. We recommend changing the filter every 6 months. However, the optimal filter replacement interval can vary depending on the environment where the router is located. If temperature alarms appear, inspect the air filter. To replace the air filter: 1.

Loosen the filter tray thumbscrew at the rear of the J2350 chassis.

2.

Hold the screw firmly and pull it away from the chassis until you have pulled the attached filter tray out of the chassis (see Figure 90 on page 195).

Figure 90: Removing the Air Filter Tray

3.

Hook-and-loop fasteners on the base of the filter tray hold the air filter inside the tray. Grasp the air filter with your fingers and gently pull it away from the filter tray.

4.

Set the old air filter aside.

5.

Place the new filter so that its edge aligns with the first hook-and-loop fastener as shown Figure 91 on page 196.

Replacing Air Filters on J2350 Routers

■

195


Figure 91: Placing the Air Filter on the Air Filter Tray

6.

Press down on the filter until it is firmly seated against the bottom of the tray.

7.

Hold the filter tray with the thumbscrew so that its sheet metal side faces the power supply fan exhaust. The air filter tray is designed to prevent it from being inserted incorrectly (see Figure 92 on page 196).

Figure 92: Inserting the Air Filter Tray on J2350 Routers

8.

Slide the tray fully into the air filter opening.

9.

Tighten the thumbscrew to the chassis.

Replacing Air Filters on J4350 and J6350 Routers The front panel of J4350 and J6350 Services Routers contains an air intake grid with a protective cover and a filter, as shown in Figure 93 on page 197.

196

■

Replacing Air Filters on J4350 and J6350 Routers


Figure 93: Attaching Air Filter and Filter Cover

We recommend changing the filter every 6 months. However, the optimal filter replacement interval can vary depending on the environment where the router is located. If temperature alarms appear, inspect the air filter. To replace the air filter: 1.

Remove the filter cover by squeezing the plastic tabs on either side of the filter cover.

2.

Pull the filter cover away from the chassis.

3.

Remove the old filter.

4.

Place the new filter in the opening.

5.

Replace the filter cover by pressing it until it clicks into place.


■

197


198

■


Chapter 12

Troubleshooting a Services Router This chapter contains the following topics: ■

Troubleshooting Hardware Components on page 199

■

Resetting the Configuration File When the Router Is Inaccessible on page 202

■

Contacting the Juniper Networks Technical Assistance Center on page 203

Troubleshooting Hardware Components This section contains the following topics: ■

Monitoring and Correcting Chassis Alarm Conditions on page 199

■

Troubleshooting Power Management on page 201

Monitoring and Correcting Chassis Alarm Conditions You can monitor alarms to troubleshoot hardware problems on a Services Router. Alarms alert you to conditions on the router chassis, or in the system software that might prevent the router from operating normally. You can monitor active alarms from the J-Web interface or the CLI. Services Router alarms warn you about conditions that can prevent the router from operating normally. Chassis and system alarm conditions are preset. When the Routing Engine detects an alarm condition, it lights the ALARM LED on the front panel. When the condition is corrected, the light turns off. To view a more detailed description of the alarm cause, issue the show chassis alarms CLI command: user@host> show chassis alarms

Table 57 on page 200 describes alarms that can occur for a chassis component such as the Routing Engine or a Physical Interface Module (PIM).

Troubleshooting Hardware Components

■

199


Table 57: Chassis Alarm Conditions and Corrective Actions Component

Alarm Conditions

Corrective Action

Alarm Severity

Alternative boot media

The Services Router boots from an alternative boot device.

Typically, the router boots from the internal compact flash. If you configured your router to boot from an alternative boot device, ignore this alarm condition.

Yellow (minor)

If you did not configure the router to boot from an alternative boot device, contact JTAC. (See “Requesting Technical Support” on page xx.) PIM

A PIM has failed.

Replace the failed PIM. (See the “Replacing a PIM” on page 162.)

Red (major)

Reformat the compact flash and install a bootable image. (See the JUNOS Software with Enhanced Services Administration Guide.)

Yellow (minor)

When a PIM fails, it attempts to reboot. If the Routing Engine detects that a PIM is rebooting too often, it shuts down the PIM. Routing Engine

An error occurred during the process of reading or writing compact flash.

If this remedy fails, you must replace the failed Routing Engine. To contact JTAC, see “Requesting Technical Support” on page xx. Routing Engine temperature is too warm.

Routing Engine fan has failed.

200

■


■

Check the room temperature. (See “Router Environmental Tolerances” on page 92.)

■

Check the air flow. (See the cooling system information for your router in this manual.)

■

Check the fans. (See the cooling system information for your router in this manual.) If you must replace a fan or the Routing Engine, contact JTAC. (See “Requesting Technical Support” on page xx.)

■

If the router has an air filter, check the filter and replace it if it appears clogged. (See the cooling system information for your router in this manual.)

Replace the failed fan. To contact JTAC, see “Requesting Technical Support” on page xx.

Yellow (minor)

Red (major)

Chapter 12: Troubleshooting a Services Router

Troubleshooting Power Management If one or more PIMs remain offline when you power on the chassis, the combination of PIMs installed might exceed the power and heat capacity of the chassis. For information about the maximum power and heat tokens permitted for each chassis, see “Planning for Power Management” on page 98. To bring the PIM online: 1.

Check if the PIM exceeds the power and heat tokens permitted by issuing the show chassis fpc and show chassis power-ratings CLI commands: user@host> show chassis fpc Temp CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt DRAM (MB) Heap

Buffer

0

Online

-------------------- CPU less FPC --------------------

1

Online

-------------------- CPU less FPC --------------------

2

Online

-------------------- CPU less FPC --------------------

3 Empty 4 Empty 5 Offline

------ Hardware exceeds High Power token limits ------

In this example, J-series power management has placed the PIM in slot 5 in an offline state to prevent damage. If brought online, the PIM would cause the combination of PIMs to exceed the maximum limit of 83 high-power tokens for the J2350 router. user@host> show chassis power-ratings Device

Low

Total Tokens FPC 1 FPC 2 FPC 3 FPC 4 FPC 5 Tokens Used

High Power 83 6 3 3 0 2 14

Heat Power 83 27 27 27 0 27 108

Ratings 83 21 18 18 0 2 59

OK OK OK OK Exceeded -

NOTE: In the show chassis power-ratings command output, the PIM slot number is reported as an FPC number. The offline PIM is not powered off and continues to draw minimal power. 2.

To bring the PIM online, you have the following options:


■

201


■

Remove one or more PIMs from the chassis. This option requires that you power off the router. For more information about removing PIMs, see “Removing a PIM” on page 162

■

Bring the PIM online without powering off the router. To do so, use the set chassis fpc offline command to set another PIM slot in the chassis to the offline state. For example: user@host# set chassis fpc 2 offline

If the power and heat tokens no longer exceed the maximum, the PIMs that were placed offline by J-series power management are brought online automatically. ■

Use the set chassis disable-power-management command to disable J-series power management: user@host# set chassis disable-power-management

CAUTION: Use extreme caution when disabling J-series power management. To prevent equipment damage, do not install a combination of PIMs that exceeds the power or heat capacity of your router when J-series power management is disabled. The set chassis disable-power-management command brings the offline PIMs online automatically. To reenable J-series power management, remove the set chassis disable-power-management command from the configuration. For detailed information about the set chassis fpc offline and set chassis disable-power-management commands, see the JUNOS System Basics Configuration Guide.

Resetting the Configuration File When the Router Is Inaccessible You can use the router's RESET CONFIG button to restore the router's configuration file when the current one is faulty or fails. You can also change the default behavior of the RESET CONFIG button.

Using the RESET CONFIG Button If a configuration fails or denies management access to the router, you can use the RESET CONFIG button to restore the router to the factory default configuration or a rescue configuration. For example, if someone inadvertently commits a configuration that denies management access to a router, you can delete the invalid configuration and replace it with a rescue configuration by pressing the RESET CONFIG button. The button is recessed to prevent it from being pressed accidentally.

202

■

Resetting the Configuration File When the Router Is Inaccessible

Chapter 12: Troubleshooting a Services Router

The rescue configuration is a previously committed, valid configuration. You must have previously set the rescue configuration through the J-Web interface or the CLI. To press the RESET CONFIG button, insert a small probe (such as a straightened paper clip) into the pinhole on the front panel (see Figure 8 on page 13 and Figure 9 on page 13): ■

By default, pressing and quickly releasing the RESET CONFIG button loads and commits the rescue configuration through the J-Web interface or the CLI. (For details, see the J-Web Interface User Guide and the JUNOS CLI User Guide.)

■

By default, pressing and holding the RESET CONFIG button for 15 seconds or more—until the STATUS LED blinks red—deletes all configurations on the router, including the backup configurations and rescue configuration, and loads and commits the factory configuration. (For details about the factory default settings, see the JUNOS Software with Enhanced Services Administration Guide.)

Changing the RESET CONFIG Button Behavior You can change the default operation of the the RESET CONFIG button by limiting how the button resets the router: ■

To prevent the RESET CONFIG button from setting the router to the factory default configuration and deleting all other configurations, enter the following command. You can still press and quickly release the button to reset it to the rescue configuration. user@host# set chassis config-button no-clear

■

To prevent the RESET CONFIG button from setting the router to the rescue configuration, enter the following command. You can still press and hold button for 15 seconds or more to reset the router to the factory defaults. user@host# set chassis config-button no-rescue

■

To disable the button and prevent the router from resetting to either configuration, use the following command: user@host# set chassis config-button no-clear no-rescue

The no-rescue option prevents the RESET CONFIG button from loading the rescue configuration. The no-clear option prevents the RESET CONFIG button from deleting all configurations on the router. To return the function of the RESET CONFIG to its default behavior, remove the config-button statement from the router configuration.

Contacting the Juniper Networks Technical Assistance Center If you need assistance while troubleshooting a Services Router, open a support case using the Case Manager link at http://www.juniper.net/support/, or call 1-888-314-JTAC (within the United States) or 1-408-745-9500 (from outside the United States). For

Contacting the Juniper Networks Technical Assistance Center

■

203


more information, see “Contacting Customer Support and Returning Hardware” on page 205.

204

■

Contacting the Juniper Networks Technical Assistance Center

Chapter 13

Contacting Customer Support and Returning Hardware This chapter describes how to return the Services Router or individual components to Juniper Networks for repair or replacement. It contains the following topics: ■

Locating Component Serial Numbers on page 205

■

Contacting Customer Support on page 208

■

Return Procedure on page 208

■

Packing a Router or Component for Shipment on page 209

Locating Component Serial Numbers Before contacting Juniper Networks to request a Return Materials Authorization (RMA), you must find the serial number on the router or component. To list the router components and their serial numbers, enter the following command-line interface (CLI) command: user@host> show chassis hardware Hardware inventory: Item Version Part number Chassis Midplane REV 00 710-012339 System IO REV 00 710-012315 Routing Engine REV 00 710-012151 HW crypto FPC 0 PIC 0 PIC

Serial number 015810200500

Description J6350 JX350 System IO

RE-J6350-3400 Crypto accelerator FPC 4x GE Base

NOTE: In the show chassis hardware command, the PIM slot number is reported as an FPC number and the PIM number (always 0) is reported as the PIC number. Most components also have a serial number ID label attached to the component body.

Locating Component Serial Numbers

■

205


The following sections describe the label location on each type of component: ■

J2320 and J2350 Chassis Serial Number and Agency Labels on page 206

■

J4350 and J6350 Chassis Serial Number and Agency Labels on page 207

■

PIM Serial Number Label on page 208

■

Power Supply Serial Number Labels on page 208

J2320 and J2350 Chassis Serial Number and Agency Labels J2320 and J2350 Services Routers have serial number ID labels located on the back of the chassis, as shown in Figure 94 on page 206, and an agency label on the bottom of the chassis, as shown in Figure 95 on page 206. Figure 94: Location of the Serial Number ID Labels

Figure 95: Location of the Agency Labels

206

■


Chapter 13: Contacting Customer Support and Returning Hardware

J4350 and J6350 Chassis Serial Number and Agency Labels J4350 and J6350 Services Routers have serial number ID labels on the back of the chassis, as shown in Figure 96 on page 207, and an agency label on the bottom front corner, as shown in Figure 97 on page 207. Figure 96: Location of Serial Number ID Labels

Figure 97: Location of the Agency Labels


■

207


PIM Serial Number Label PIMs are field-replaceable. Each PIM has a unique serial number. The serial number label is located on the right side of the PIM, when the PIM is horizontally oriented (as it would be installed in the router). The exact location might be slightly different on different PIMs, depending on the placement of components on the PIM board.

Power Supply Serial Number Labels The power supplies installed in the J6350 Services Router are field-replaceable. Each power supply has a unique serial number. The serial number label is located on the top of the power supply.

Contacting Customer Support After you have located the serial numbers of the components you need to return, contact Juniper Networks Technical Assistance Center (JTAC) in one of the following ways. You can contact JTAC 24 hours a day, seven days a week. ■

On the Web, using the Case Manager link at http://www.juniper.net/support/

■

By telephone: From the US and Canada: 1-888-314-JTAC From all other locations: 1-408-745-9500

If contacting JTAC by telephone, enter your 11-digit case number followed by the pound (#) key if this is an existing case, or press the star (*) key to be routed to the next available support engineer.

Information You Might Need to Supply to JTAC When requesting support from JTAC by telephone, be prepared to provide the following information: ■

Your existing case number, if you have one

■

Details of the failure or problem

■

Type of activity being performed on the router when the problem occurred

■

Configuration data displayed by one or more show commands

Return Procedure If the problem cannot be resolved by the JTAC technician a Return Materials Authorization (RMA) number is issued. This number is used to track the returned material at the factory and to return repaired or new components to the customer as needed.

208

■

Contacting Customer Support


NOTE: Do not return any component to Juniper Networks unless you have first obtained an RMA number. Juniper Networks reserves the right to refuse shipments that do not have an RMA. Refused shipments are returned to the customer via collect freight. For more information about return and repair policies, see the customer support Web page at http://www.juniper.net/support/guidelines.html. For product problems or technical support issues, open a support case using the Case Manager link at http://www.juniper.net/support/, or call 1-888-314-JTAC (within the United States) or 1-408-745-9500 (outside the United States). When you need to return a component: 1.

Determine the part number and serial number of the component. For instructions, see “Locating Component Serial Numbers” on page 205.

2.

Obtain an RMA number from JTAC.

3.

Provide the following information: ■

Part number and serial number of component

■

Your name, organization name, telephone number, fax number, and shipping address

■

Description of the failure The support representative validates your request and issues an RMA number for return of the component.

4.

Pack the router or component for shipment, as described in “Packing a Router or Component for Shipment” on page 209.

Packing a Router or Component for Shipment This section contains the following topics: ■

Tools and Parts Required on page 209

■

Packing the Services Router for Shipment on page 210

■

Packing Components for Shipment on page 210

Tools and Parts Required To remove components from the router or the router from a rack, you need the following tools and parts: ■

Blank panels to cover empty slots

■

Electrostatic bag or antistatic mat, for each component

■

Electrostatic discharge (ESD) grounding wrist strap

Packing a Router or Component for Shipment

■

209


■

Flat-blade screwdriver, approximately 1/4 in. (6 mm)

■

Phillips (+) screwdrivers, numbers 1 and 2

Packing the Services Router for Shipment To pack the router for shipment, follow this procedure: 1.

Retrieve the shipping carton and packing materials in which the router was originally shipped. If you do not have these materials, contact your Juniper Networks representative about approved packaging materials.

2.


3.

On the console or other management device connected to the master Routing Engine, enter CLI operational mode and issue the following command to shut down the router software. user@host> request system halt

Wait until a message appears on the console confirming that the operating system has halted. For more information about the command, see the JUNOS Software with Enhanced Services Interfaces and Routing Configuration Guide. 4.

Shut down power to the router by pressing the power button on the front panel of the router.

5.

Disconnect power from the router. For instructions, see “Replacing AC Power Supply Cords” on page 181.

6.

Remove the cables that connect to all external devices. For instructions, see “Removing PIM Cables” on page 165.

7.

Remove all field-replaceable units (FRUs) from the router.

8.

If the router is installed on a wall or rack, have one person support the weight of the router, while another person unscrews and removes the mounting screws.

9.

Place the router in the shipping carton.

10. Cover the router with an ESD bag, and place the packing foam on top of and

around the router. 11. Replace the accessory box on top of the packing foam. 12. Securely tape the box closed. 13. Write the RMA number on the exterior of the box to ensure proper tracking.

Packing Components for Shipment To pack and ship individual components, follow these guidelines:

210

■



■

When you return components, make sure they are adequately protected with packing materials and packed so that the pieces are prevented from moving around inside the carton.

■

Use the original shipping materials if they are available.

■

Place individual boards in electrostatic bags.

■

Write the RMA number on the exterior of the box to ensure proper tracking.

CAUTION: Do not stack any of the router components.


■

211


212

■


Part 4

J-series Requirements and Specifications ■

Network Cable Specifications and Connector Pinouts on page 215

■

Safety and Regulatory Compliance Information on page 233


■

213


214

■


Chapter 14

Network Cable Specifications and Connector Pinouts The network interfaces supported on the router accept different kinds of network cable. ■

Serial PIM Cable Specifications on page 215

■

Fast Ethernet RJ-45 Connector Pinout on page 225

■

Gigabit Ethernet uPIM RJ-45 Connector Pinout on page 225

■

Gigabit Ethernet ePIM RJ-45 Connector Pinout on page 226

■

Chassis Console Port Pinouts on page 226

■

E1 and T1 RJ-48 Cable Pinouts on page 227

■

E3 and T3 BNC Connector Pinout on page 230

■

ADSL and G.SHDSL RJ-11 Connector Pinout on page 230

■

ISDN RJ-45 Connector Pinout on page 231

Serial PIM Cable Specifications The 2-port serial PIM uses the cables and connectors summarized in Table 58 on page 215. Pinouts are detailed in Table 59 on page 216 through Table 68 on page 224. Table 58: 2-Port Serial PIM Cables and Connectors End-to-End Conductors

Pinouts

4-40 threaded jackscrews

13

Table 59 on page 216

DB-25 female

4-40 threaded jacknuts

13


RS-422/449 (EIA-449) DTE

DC-37 (DB-37) male


25


RS-422/449 (EIA-449) DCE

DC-37 (DB-37) female


25


Name

Connector

Connector Hardware

RS-232 DTE

DB-25 male

RS-232 DCE

Serial PIM Cable Specifications

■

215


Table 58: 2-Port Serial PIM Cables and Connectors (continued) End-to-End Conductors

Pinouts


23


DB-25 female


22


V.35 DTE

M/34 male

Standard (Normally included with M/34 connector shell)

18


V.35 DCE

M/34 female

Standard (Normally included with M/34 connector shell)

18


X.21 DTE

DB-15 male

M3 threaded jackscrews

13


X.21 DCE

DB-15 female

M3 threaded jacknuts

13


Name

Connector

Connector Hardware

EIA-530A DTE

DB-25 male

EIA-530A DCE

RS-232 DTE Cable Pinout Table 59: RS-232 DTE Cable Pinout LFH-60 Pin

DB-25 Pin

LFH-60 Pairing

Description

15

1

–

Frame Ground

60

2

–

Transmit Data

1

3

–

Receive Data

48

4

–

Request to Send

37

5

–

Clear to Send

9

6

–

Data Set Ready

57

7

–

Signal Ground

13

8

–

Data Carrier Detect

56

15

–

Transmit Clock

5

17

–

Receive Clock

41

18

–

Local Loopback

33

20

–

Data Terminal Ready

52

24

–

Terminal Clock

22 to 21

–

–

–

216

■


Chapter 14: Network Cable Specifications and Connector Pinouts

Table 59: RS-232 DTE Cable Pinout (continued) LFH-60 Pin

DB-25 Pin

LFH-60 Pairing

Description

18 to 17

–

–

–

RS-232 DCE Cable Pinout Table 60: RS-232 DCE Cable Pinout LFH-60 Pin

DB-25 Pin

LFH-60 Pairing

Description

15

1

–

Frame Ground

1

2

–

Transmit Data

60

3

–

Receive Data

37

4

–

Request to Send

48

5

–

Clear to Send

33

6

–

Data Set Ready

57

7

–

Signal Ground

13

8

–

Data Carrier Detect

56

15

–

Transmit Clock

52

17

–

Receive Clock

45

18

–

Local Loopback

9

20

–

Data Terminal Ready

5

24

–

Terminal Clock

22 to 21

–

–

–

RS-422/449 (EIA-449) DTE Cable Pinout Table 61: RS-422/449 (EIA-449) DTE Cable Pinout LFH-60 Pin

DC-37 (DB-37) Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground

60

4

59

Send Data (A)

56

5

55

Send Timing (A)


■

217


Table 61: RS-422/449 (EIA-449) DTE Cable Pinout (continued) LFH-60 Pin

DC-37 (DB-37) Pin

LFH-60 Pairing

Description

1

6

2

Receive Data (A)

48

7

47

Request to Send (A)

5

8

6

Receive Timing (A)

37

9

38

Clear to Send (A)

41

10

–

Local Loopback

9

11

10

Data Mode (A)

33

12

34

Terminal Ready (A)

13

13

14

Receive Ready (A)

52

17

51

Terminal Timing (A)

36

19

–

Signal Ground

4

20

–

Receive Common

59

22

60

Send Data (B)

55

23

56

Send Timing (B)

2

24

1

Receive Data (B)

47

25

48

Request to Send (B)

6

26

5

Receive Timing (B)

38

27

37

Clear to Send (B)

10

29

9

Data Mode (B)

34

30

33

Terminal Ready (B)

14

31

13

Receiver Ready (B)

51

35

52

Terminal Timing (B)

57

37

–

Send Common

26 to 25

–

–

–

18 to 17

–

–

–

218

■



RS-422/449 (EIA-449) DCE Cable Pinout Table 62: RS-422/449 (EIA-449) DCE Cable Pinout LFH-60 Pin

DC-37 (DB-37) Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground

1

4

2

Send Data (A)

56

5

55

Send Timing (A)

60

6

59

Receive Data (A)

37

7

38

Request to Send (A)

52

8

51

Receive Timing (A)

48

9

47

Clear to Send (A)

45

10

–

Local Loopback

33

11

34

Data Mode (A)

9

12

10

Terminal Ready (A)

13

13

14

Receive Ready (A)

5

17

6

Terminal Timing (A)

36

19

–

Signal Ground

4

20

–

Receive Common

2

22

1

Send Data (B)

55

23

56

Send Timing (B)

59

24

60

Receive Data (B)

38

25

37

Request to Send (B)

51

26

52

Receive Timing (B)

47

27

48

Clear to Send (B)

34

29

33

Data Mode (B)

10

30

9

Terminal Ready (B)

14

31

13

Receiver Ready (B)

6

35

5

Terminal Timing (B)

57

37

–

Send Common

26 to 25

–

–

–


■

219


EIA-530A DTE Cable Pinout Table 63: EIA-530A DTE Cable Pinout LFH-60 Pin

DB-25 Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground

60

2

59

Transmit Data (A)

1

3

2

Receive Data (A)

48

4

47

Request to Send (A)

37

5

38

Clear to Send (A)

9

6

–

Data Set Ready (A)

57

7

–

Signal Ground

13

8

14

Received Line Signal Detector (A)

6

9

5

Receive Clock (B)

14

10

13

Received Line Signal Detector (B)

51

11

52

Terminal Timing (B)

55

12

56

Transmit Clock (B)

38

13

37

Clear to Send (B)

59

14

60

Transmit Data (B)

56

15

55

Transmit Clock (A)

2

16

1

Receive Data (B)

5

17

6

Receive Clock (A)

41

18

–

Local Loopback

47

19

48

Request to Send (B)

33

20

–

Data Terminal Ready (A)

4

23

–

Signal Ground

52

24

51

Terminal Timing (A)

26 to 25

–

–

–

30 to 29

–

–

–

18 to 17

–

–

–

220

■



EIA-530A DCE Cable Pinout Table 64: EIA-530A DCE Cable Pinout LFH-60 Pin

DB-25 Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground

1

2

2

Transmit Data (A)

60

3

59

Receive Data (A)

37

4

38

Request to Send (A)

48

5

47

Clear to Send (A)

33

6

–

Data Set Ready (A)

57

7

–

Signal Ground

13

8

14

Received Line Signal Detector (A)

51

9

52

Receive Clock (B)

14

10

13

Received Line Signal Detector (B)

6

11

5

Terminal Timing (B)

55

12

56

Transmit Clock (B)

47

13

48

Clear to Send (B)

2

14

1

Transmit Data (B)

56

15

55

Transmit Clock (A)

59

16

60

Receive Data (B)

52

17

51

Receive Clock (A)

45

18

–

Local Loopback

38

19

37

Request to Send (B)

9

20

–

Data Terminal Ready (A)

4

23

–

Signal Ground

5

24

6

Terminal Timing (A)

26 to 25

–

–

–

30 to 29

–

–

–


■

221


V.35 DTE Cable Pinout Table 65: V.35 DTE Cable Pinout LFH-60 Pin

M/34 Pin

LFH-60 Pairing

Description

15

A

–

Frame Ground

57

B

–

Signal Ground

48

C

–

Request to Send

37

D

–

Clear to Send

9

E

–

Data Set Ready

13

F

–

Received Line Signal Detector

33

H

–

Data Terminal Ready

41

K

–

Test Mode

60

P

59

Transmit Data (A)

1

R

2

Receive Data (A)

59

S

60

Transmit Data (B)

2

T

1

Receive Data (B)

52

U

51

Terminal Timing (A)

5

V

6

Receive Timing (A)

51

W

52

Terminal Timing (B)

6

X

5

Receive Timing (B)

56

Y

55

Transmit Timing (A)

55

AA

56

Transmit Timing (B)

22 to 21

–

–

–

26 to 25

–

–

–

18 to 17

–

–

–

222

■



V.35 DCE Cable Pinout Table 66: V.35 DCE Cable Pinout LFH-60 Pin

M/34 Pin

LFH-60 Pairing

Description

15

A

–

Frame Ground

57

B

–

Signal Ground

37

C

–

Request to Send

48

D

–

Clear to Send

33

E

–

Data Set Ready

13

F

–

Received Line Signal Detector

9

H

–

Data Terminal Ready

45

K

–

Test Mode

1

P

2

Transmit Data (A)

60

R

59

Receive Data (A)

2

S

1

Transmit Data (B)

59

T

60

Receive Data (B)

5

U

6

Terminal Timing (A)

52

V

51

Receive Timing (A)

6

W

5

Terminal Timing (B)

51

X

52

Receive Timing (B)

56

Y

55

Transmit Timing (A)

55

AA

56

Transmit Timing (B)

22 to 21

–

–

–

26 to 25

–

–

–

X.21 DTE Cable Pinout Table 67: X.21 DTE Cable Pinout LFH-60 Pin

DB-15 Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground


■

223


Table 67: X.21 DTE Cable Pinout (continued) LFH-60 Pin

DB-15 Pin

LFH-60 Pairing

Description

60

2

59

Transmit Data (A)

48

3

47

Control (A)

1

4

2

Receive (A)

37

5

38

Indicate (A)

5

6

6

Signal Element Timing (A)

57

8

–

Signal Ground

59

9

60

Transmit Data (B)

47

10

48

Control (B)

2

11

1

Receive (B)

38

12

37

Indicate (B)

6

13

5

Signal Element Timing (B)

30 to 29

–

–

–

18 to 17

–

–

–

X.21 DCE Cable Pinout Table 68: X.21 DCE Cable Pinout LFH-60 Pin

DB-15 Pin

LFH-60 Pairing

Description

15

1

–

Shield Ground

1

2

2

Transmit Data (A)

37

3

38

Control (A)

60

4

59

Receive (A)

48

5

47

Indicate (A)

52

6

51

Signal Element Timing (A)

57

8

–

Signal Ground

2

9

1

Transmit Data (B)

38

10

37

Control (B)

59

11

60

Receive (B)

224

■



Table 68: X.21 DCE Cable Pinout (continued) LFH-60 Pin

DB-15 Pin

LFH-60 Pairing

Description

47

12

48

Indicate (B)

51

13

52

Signal Element Timing (B)

30 to 29

–

–

–

Fast Ethernet RJ-45 Connector Pinout Table 69 on page 225 describes the Fast Ethernet RJ-45 connector pinout information.

NOTE: Either a straight-through or cross-over cable can be used to connect to the interface.

Table 69: Fast Ethernet RJ-45 Connector Pinout Pin

Signal

1

TX+

2

TX-

3

RX+

4

Termination network

5

Termination network

6

RX-

7

Termination network

8

Termination network

Gigabit Ethernet uPIM RJ-45 Connector Pinout Table 70 on page 225 describes connector pinout information for 8-port and 16-port Gigabit Ethernet uPIM ports. Table 70: Gigabit Ethernet uPIM RJ-45 Connector Pinout Pin

Signal Name

Function

1

BI_DA+

Bidirectional pair +A

2

BI_DA-

Bidirectional pair -A

Fast Ethernet RJ-45 Connector Pinout

■

225


Table 70: Gigabit Ethernet uPIM RJ-45 Connector Pinout (continued) Pin

Signal Name

Function

3

BI_DB+

Bidirectional pair +B

4

BI_DC+

Bidirectional pair +C

5

BI_DC-

Bidirectional pair -C

6

BI_DB-

Bidirectional pair -B

7

BI_DD+

Bidirectional pair +D

8

BI_DD-

Bidirectional pair -D

Gigabit Ethernet ePIM RJ-45 Connector Pinout Table 71 on page 226 describes connector pinout information for 1-port Gigabit Ethernet ePIM ports. Table 71: Gigabit Ethernet ePIM RJ-45 Connector Pinouts Pin

Signal

1

MDI0+

2

MDI0-

3

MDI1+

4

MDI2+

5

MDI2-

6

MDI1-

7

MDI3+

8

MDI3-

Chassis Console Port Pinouts The console port on a J-series Services Router chassis has an RJ-45 connector. Table 72 on page 227 provides RJ-45 chassis console connector pinout information. An RJ-45 cable is supplied with the router. To connect the console port to an external management device, you need an RJ-45 to DB-9 serial port adapter, which is also supplied with the router.

226

■

Gigabit Ethernet ePIM RJ-45 Connector Pinout


Table 72: RJ-45 Chassis Console Connector Pinout Pin

Signal

Description

1

RTS Output

Request to Send

2

DTR Output

Data Terminal Ready

3

TxD Output

Transmit Data

4

GND

Chassis Ground

5

GND

Chassis Ground

6

RxD Input

Receive Data

7

DSR Input

Data Set Ready

8

CTS Input

Clear to Send

Table 73 on page 227 describes the DB-9 connector pinouts. Table 73: DB-9 Console Connector Pinout Pin

Signal

Direction

Description

1

DCD

Data Terminal Ready

5

Ground

—

Signal Ground

6

DSR

Request To Send

8

CTS

, in syntax descriptions......................................xviii >, operational mode command prompt......................79 ? command for CLI online help................................................83 in configuration mode...........................................80 in operational mode..............................................79 ? icon ..........................................................................73 [ ], in configuration statements...................................xix { }, in configuration statements..................................xix | (pipe), in syntax descriptions....................................xix

A AC plug types...............................................................96 AC power connecting power...............................................110 cords See AC power cords dedicated AC power feed requirement................184 electrical specifications.........................................95 grounding the router...........................................110 installing a J6350 power supply..........................183 J2320 system........................................................18 J2350 system........................................................18 J4350 system........................................................30 J6350 system........................................................31 removing a J6350 power supply.........................182 requirements........................................................95 safety guidelines.................................................239 AC power cords electrical specifications.........................................96 physical requirements...........................................95

plug types.............................................................96 replacing.............................................................181 accident, steps to take................................................247 ACTIVITY LED (Dual-Port Fast Ethernet PIM)...............61 adapter, console port chassis........................................................125, 128 addresses ge-0/0/0 for autoinstallation................................120 loopback.............................................................120 management interface........................................120 ADSL PIM description............................................................64 PIM ONLINE LED..................................................65 ADSL ports description............................................................64 LED states.............................................................65 RJ-11 connector pinouts......................................230 agency approvals.......................................................268 air filter description......................................................19, 32 location...............................................................197 replacing.............................................................196 airflow description............................................................33 space requirement................................................89 ALARM LED description......................................................15, 28 indications..........................................................199 alarms conditions, in chassis components......................200 LED.................................................................15, 28 alternative boot media See boot devices; USB altitude requirement....................................................92 Annex A; Annex B See ADSL; SHDSL antistatic mat.............................................................237 Apply button................................................................75 approvals, agency......................................................268 asymmetric digital subscriber line See ADSL AT modem command........................................127, 128 AT&D1 modem command.........................................127 AT&K0 modem command.........................................127 AT&W modem command..........................................127 ATDT modem command...........................................129 ATS0=1 modem command.......................................127 AUX port................................................................17, 30 auxiliary console port.............................................17, 30

Index

■

277


B

C

backup compact flash, removing...............................174 backup router defining (configuration editor)............................139 description..........................................................120 basic connectivity CLI configuration editor......................................136 establishing.........................................................117 J-Web configuration editor..................................136 Quick Configuration............................................129 requirements......................................................122 sample configuration..........................................140 secure Web access..............................................143 verifying.............................................................139 battery environmental compliance.................................269 handling..............................................................262 lithium................................................................269 BGP route reflectors license........................................152 blank panel for PIM slots..........................................................46 for power supply (J6350).....................................181 blinking Fast Ethernet port ACTIVITY LED state (dual-port PIM)..................................................................61 Fast Ethernet port link activity LED state (4-port ePIM).................................................................63 Gigabit Ethernet port LED ....................................52 Gigabit Ethernet port TX/RX LED state......................................................17, 29, 54 ISDN BRI ONLINE LED state.................................64 POWER LED state...........................................14, 27 STATUS (router) LED state..............................15, 28 boot devices...........................................................12, 25 external compact flash..........................................18 boot process, backup router for.................................120 boot sequence........................................................12, 25 Border Gateway Protocol (BGP) route reflectors license....................................................................152 bottom pane................................................................72 braces, in configuration statements.............................xix brackets angle, in syntax descriptions..............................xviii square, in configuration statements.....................xix browser interface See J-Web interface BTUs per hour..............................................................92 built-in Ethernet ports See Gigabit Ethernet ports buttons Apply (Quick Configuration)..................................75 Cancel (J-Web configuration editor).......................76 Cancel (Quick Configuration)................................75 Commit (J-Web configuration editor)....................76 OK (J-Web configuration editor)............................76 OK (Quick Configuration)......................................75 power.............................................................14, 27 RESET CONFIG...................................................202

cables AC power See AC power cords ADSL RJ-11 pinouts.............................................230 arranging for safety.............................................165 chassis console port, DB-9 connector pinouts............................................................227 chassis console port, RJ-45 connector pinouts............................................................226 connecting to network media.............................109 console port cable (chassis), connecting..............................................125, 128 console port cable (chassis), replacing................162 DC cables See DC power cables disconnecting PIM cables....................................165 E1 RJ-48 pinouts.................................................227 Ethernet cable, connecting..................123, 125, 128 Fast Ethernet RJ-45 connector pinout.................225 Gigabit Ethernet RJ-45 connector pinouts (ePIM).............................................................226 Gigabit Ethernet RJ-45 connector pinouts (uPIMs)............................................................225 grounding...........................................................109 ISDN RJ-45 pinouts.............................................231 PIM, installing.....................................................165 PIM, removing....................................................165 reducing radio frequency interference (RFI)..........94 serial EIA-530A DCE pinouts...............................221 serial EIA-530A DTE pinouts...............................220 serial PIM specifications......................................215 serial RS-232 DCE pinouts..................................217 serial RS-232 DTE pinouts...................................216 serial RS-422/449 (EIA-449) DCE pinouts............219 serial RS-422/449 (EIA-449) DTE pinouts............217 serial V.35 DCE pinouts......................................223 serial V.35 DTE pinouts.......................................222 serial X.21 DCE pinouts......................................224 serial X.21 DTE pinouts......................................223 SHDSL RJ-11 pinouts...........................................230 T1 RJ-48 pinouts.................................................227 Canada, compliance statement..................................269 Cancel button J-Web configuration editor....................................76 Quick Configuration..............................................75 case number, for JTAC...............................................208 certificates See SSL certificates channelized E1 PIM.....................................................57 channelized E1 ports description............................................................57 LED states.............................................................59 RJ-48 cable pinouts.............................................227 channelized T1 PIM......................................................57 channelized T1 ports description............................................................57 LED states.............................................................59 RJ-48 cable pinouts.............................................227

278

■

Index

Index

chassis alarm conditions and remedies...........................200 component serial number labels.................205, 206 cover, replacing (J2320 and J2350).....................166 dimensions.....................................................11, 24 environmental tolerances.....................................92 grounding...........................................................109 heat dissipation.....................................................98 J2320......................................................................8 J2350......................................................................8 J4350....................................................................21 J6350....................................................................21 lifting guidelines..................................................252 PIM slot numbers............................................14, 26 power consumption..............................................98 power management, planning..............................98 power management, troubleshooting.................201 rack requirements.................................................90 weight.............................................................11, 24 chassis software process..............................................35 chassisd process..........................................................35 checklist, for site preparation.....................................101 clear operation, RESET CONFIG button......................202 clear-text access.........................................................121 clearance.....................................................................89 CLI See JUNOS CLI CLI configuration editor basic settings......................................................136 initial configuration.............................................136 secure access configuration................................148 statement types....................................................81 CLI terminal See JUNOS CLI command completion description............................................................82 setting on and off..................................................85 command hierarchy.....................................................78 command prompts changing...............................................................85 configuration mode (#).........................................80 operational mode (>)...........................................79 command-line interface See CLI configuration editor; JUNOS CLI comments, in configuration statements......................xix Commit button............................................................76 committed configuration root password requirement.................................119 compact flash backup, replacing................................................174 description......................................................12, 25 external, description.............................................18 external, J2320 and J2350....................................18 external, replacing..............................................174 inserting.............................................................173 location (horizontal)............................................172 location (vertical)................................................171 minor (yellow) alarm..........................................200

removing............................................................173 replacing.....................................................168, 171 replacing, rotating fans warning.................169, 172 compliance EMC requirements..............................................269 general standards...............................................268 lithium battery....................................................262 components packing for shipment..........................................210 replacing.............................................................161 serial number label.....................................205, 206 troubleshooting...................................................199 See also LEDs configuration clearing with RESET CONFIG button...................202 factory, resetting with RESET CONFIG button.............................................................202 root password requirement.................................119 configuration editor See CLI configuration editor; J-Web configuration editor configuration mode commands............................................................80 prompt (#)............................................................80 connection AC power............................................................110 DC power............................................................112 for management.................................................117 network cables....................................................109 to Services Router...............................................123 connectivity basic See basic connectivity hardware............................................................103 modem (remote) connection..............................126 regaining lost DHCP lease after initial configuration...................................................130 through J-Web.....................................................123 through the CLI locally........................................125 through the CLI remotely....................................126 console port adapter (chassis).........................................125, 128 auxiliary console port......................................17, 30 connecting through the CLI locally......................125 connecting through the CLI remotely..................126 description......................................................17, 30 on chassis, DB-9 connector pinouts....................227 on chassis, RJ-45 connector pinouts....................226 replacing the cable..............................................162 settings for local CLI connection.........................125 settings for modem connection at router for remote CLI access...........................................127 settings for modem connection for remote CLI access.............................................................128 container statements...................................................81 conventions notice icons.........................................................xvii text and syntax..................................................xviii

Index

■

279


cooling system airflow requirement..............................................89 description......................................................19, 32 Copper Gigabit Ethernet ePIMs overview...............................................................52 pinouts................................................................226 Copper Gigabit Ethernet uPIMs overview...............................................................49 pinouts................................................................225 cords See AC power cords; cables; DC power cables cover, replacing (J2320 and J2350)............................166 Crypto Accelerator Module description......................................................12, 25 installing.....................................................190, 194 location.......................................................188, 191 removing....................................................189, 192 curly braces, in configuration statements....................xix customer support.........................................................xx contacting JTAC.....................................................xx contacting JTAC for hardware return...................208 information required for hardware return...........208

D daemons See processes, software datasheets URL............................................................43 DB-9 connector pinouts chassis console port............................................227 DB-9 to DB-25 serial port adapter..............................128 DC power cables See DC power cables connecting power...............................................112 dedicated DC power feed requirement...............187 electrical specifications.........................................95 grounding requirements and warning.................242 grounding the router...........................................113 installing a J6350 power supply..........................186 J2320 system........................................................18 J2350 system........................................................18 J4350 system........................................................30 J6350 system........................................................31 power disconnection warning.............................241 removing a J6350 power supply.........................185 requirements........................................................95 safety guidelines (general)...................................240 safety guidelines, power sources for redundant power supplies................................................241 wiring sequence warning....................................243 wiring terminations warning...............................245 DC power cables electrical specifications.........................................97 physical requirements...........................................97 replacing.............................................................184 usage warning.....................................................240 Declaration of Conformity..........................................271

280

■

Index

default gateway defining (Quick Configuration)............................131 description..........................................................120 deleting licenses (CLI).......................................................156 licenses (J-Web)...................................................154 DHCP (Dynamic Host Configuration Protocol)............120 DHCP server after initial configuration.....................................120 before initial configuration..................................120 regaining lost lease after initial configuration...................................................130 dhcpd process..............................................................35 diagnosis chassis................................................................200 hardware............................................................200 dial-up modem connection See modem connection to router console port digital certificate See SSL certificates digital subscriber line See ADSL; SHDSL DIMMs (dual inline memory modules) See DRAM modules DNS (Domain Name System).....................................119 DNS server defining (configuration editor)............................138 defining (Quick Configuration)............................131 function..............................................................119 documentation set comments on.......................................................xix domain name............................................................118 defining (configuration editor)............................137 defining (Quick Configuration)............................130 See also DNS server Domain Name System...............................................119 domain search defining (configuration editor)............................138 defining (Quick Configuration)............................131 downloading licenses (J-Web)...................................................155 DRAM modules installing.............................................................180 location...............................................................178 removing............................................................179 dry chemical fire extinguishers, prohibited..................93 DS1 ports See E1 ports; T1 ports DS3 ports See E3 ports; T3 ports DSL See ADSL; SHDSL dual inline memory modules See DRAM modules Dual-Port Channelized T1/E1/ISDN PRI PIM.................57 Dual-Port E1 PIM..........................................................56 Dual-Port E3 PIM .........................................................59 Dual-Port Fast Ethernet PIM.........................................61 Dual-Port Serial PIM.....................................................55 Dual-Port T1 PIM..........................................................56 Dual-Port T3 PIM .........................................................59 dynamic host configuration process.............................35

Index

E E1 ports description............................................................56 See also channelized E1 ports LED states.............................................................57 RJ-48 cable pinouts.............................................227 E3 ports BNC connector pinouts.......................................230 description............................................................59 LED states.............................................................60 earth ground See grounding earthquakes rack-mount requirements.....................................91 seismic requirements............................................92 EIA-530A DCE cable pinouts......................................221 EIA-530A DTE cable pinouts......................................220 electrical specifications................................................95 electricity safety warnings...................................................237 wiring guidelines...................................................94 electromagnetic compatibility (EMC) See EMC electromagnetic interference (EMI) See See EMI electrostatic bag, for storing components...................237 electrostatic discharge, preventing.............................237 elements, J-Web...........................................................72 EMC (electromagnetic compatibility) compliance with requirements............................269 preventing problems with.....................................94 standards............................................................268 EMI (electromagnetic interference) compliance with requirements............................269 standards............................................................268 suppressing...........................................................94 encrypted access through HTTPS...................................................143 through SSH........................................................121 through SSL........................................................143 environment, CLI displaying.............................................................84 setting...................................................................85 environmental requirements for operation..................92 ePIMs 4-Port Fast Ethernet..............................................62 Copper Gigabit Ethernet........................................52 SFP Gigabit Ethernet.............................................52 slot locations.........................................................27 EPROM..................................................................12, 25 ESD (electrostatic discharge), preventing...................237 ESD wrist strap verifying resistance, for safety............................237 wearing during installation....................................21 Ethernet cable chassis console DB-9 connector pinouts..............227 chassis console, RJ-45 connector pinouts............226 connecting the Services Router to a management device.....................................................123, 125

connecting the Services Router to a modem.......128 replacing.............................................................162 Ethernet ports See Fast Ethernet ports See Gigabit Ethernet ports European Union, compliance statement....................271 external compact flash See compact flash

F failures compact flash, USB for....................................17, 30 PIM, troubleshooting...........................................200 Routing Engine fan, troubleshooting...................200 fans description......................................................19, 32 See also air filter See also cooling system failure, troubleshooting.......................................200 Fast Ethernet ports 4-Port Fast Ethernet ePIM.....................................62 ACTIVITY status (dual-port PIM)............................61 Dual-Port Fast Ethernet PIM..................................61 LED states (4-port ePIM).......................................63 LED states (dual-port PIM).....................................61 link activity (4-port ePIM)......................................63 link status (4-port ePIM)........................................63 LINK/ SPEED status (dual-port PIM).......................61 RJ-45 connector pinout.......................................225 FCC Part 15 compliance statement............................273 FCC Part 68 compliance statement............................273 feature licenses See licenses feature overview..........................................................36 field-replaceable units, replacing................................161 filter cover See air filter filter, air See air filter fire extinguishers prohibited.............................................................93 required................................................................93 fire safety requirements...............................................92 fire suppression equipment required..............................................93 shutdown requirement.........................................92 firewall authentication process.....................................35 flowd process...............................................................35 font conventions........................................................xviii forwarding software process........................................35 FPC, PIM slot number in command displays..........................................................166, 205 front panel.............................................................13, 26 FRUs (field-replaceable units), replacing.....................161 fwauthd process...........................................................35

Index

■

281


G

H

G.SHDSL PIM description............................................................66 PIM ONLINE LED..................................................67 G.SHDSL ports See SHDSL ports gateway, default.........................................................120 ge-0/0/0 connecting through J-Web...................................123 defining address (configuration editor)...............139 defining address (Quick Configuration)...............131 for autoinstallation..............................................120 management interface........................................120 Gigabit Ethernet ePIMs alarms...................................................................54 description............................................................52 high-speed slot locations.......................................54 installation............................................................54 LEDs.....................................................................54 limitations.............................................................54 link speeds and transmission modes ...................53 SFP, optical interface support...............................54 Gigabit Ethernet ports built-in............................................................17, 29 copper..................................................................52 LED states...........................................17, 29, 52, 54 port 0..................................................................120 RJ-45 connector pinouts (ePIM)...........................226 RJ-45 connector pinouts (uPIMs).........................225 SFP (optical)....................................................51, 53 Gigabit Ethernet uPIMs alarms...................................................................52 description............................................................49 installation............................................................51 LEDs.....................................................................52 limitations.............................................................51 link speeds and transmission modes ...................51 SFP, optical interface support...............................52 glossary basic connectivity...............................................117 PIMs.....................................................................43 secure Web access..............................................143 graceful shutdown......................................................115 graphical user interface See J-Web interface grounding cable...................................................................109 chassis................................................................109 DC power requirements and warning.................242 equipment warning.............................................246 grounding lug connecting..................................................111, 113 group licenses............................................................154 GUI See J-Web interface

HA (high availability) LED description......................................................16, 29 hardware alarm conditions and remedies...........................200 installation and connection.................................103 maintenance.......................................................161 PIM overview........................................................43 product overview....................................................3 replacing components.........................................161 returning.............................................................205 troubleshooting components..............................199 See also LEDs hardware features components..........................................................24 front panel......................................................13, 26 PIMs.....................................................................43 product overview....................................................3 Hayes-compatible modem See modem connection to router console port heat dissipation, PIMs managing..............................................................98 troubleshooting...................................................201 help apropos command...............................................83 Help icon (?)...........................................................73, 76 help reference command.............................................83 help topic command....................................................83 Help, J-Web interface.............................................72, 76 Help, JUNOS CLI...........................................................83 high-speed interfaces See ePIMs high-speed slots for ePIMs, location.............................27 hostname...................................................................118 defining (configuration editor)............................137 defining (configuration wizard)...........................133 defining (Quick Configuration)............................130 overview.............................................................118 See also DNS server HTTP (Hypertext Transfer Protocol) enabling Web access (configuration editor).........148 enabling Web access (Quick Configuration)........145 on built-in management interfaces.....................144 verifying configuration........................................149 HTTPS (Hypertext Transfer Protocol over SSL) enabling secure access (configuration editor).............................................................148 enabling secure access (Quick Configuration).................................................145 Quick Configuration............................................145 recommended for secure access.........................144 verifying secure access configuration..................149 humidity requirement..................................................92 Hyperterminal, for terminal emulation local CLI connection............................................125 modem connection at router for remote CLI access.............................................................127 modem connection for remote CLI access..........128

282

■

Index

Index

Hypertext Transfer Protocol See HTTP Hypertext Transfer Protocol over SSL See HTTPS

I idle time, setting for a CLI session................................85 ifd process...................................................................35 iked process.................................................................35 immunity standards...................................................268 initial configuration requirements..............................122 injury, steps to take....................................................247 installation AC power supplies (J6350)..................................183 air filter...............................................................196 compact flash.............................................168, 171 console port cable (chassis).................................162 Crypto Accelerator Module..........................190, 194 DC power supplies (J6350)..................................186 DRAM modules...................................................180 initial..................................................................103 licenses (CLI).......................................................155 licenses (J-Web)...................................................154 PIM cables..........................................................165 PIMs...................................................................164 preparation...........................................................89 requirements......................................................103 restricted access, J2350......................................105 restricted access, J4350 and J6350............................................19, 31, 32, 106 safety guidelines and warnings...........................252 site checklist.......................................................101 site guidelines.......................................................89 USB storage device.............................................177 Integrated Services Digital Network See ISDN interface software process...........................................35 interfaces J2320 overview.......................................................4 J2320 types supported..........................................46 J2350 overview.......................................................4 J2350 types supported..........................................46 J4350 overview.......................................................5 J4350 types supported..........................................47 J6350 overview.......................................................6 J6350 types supported..........................................47 Internet Explorer, modifying for worldwide version of JUNOS software........................................................71 Internet Key Exchange process....................................35 ISDN BRI ports BRI S/T..................................................................63 BRI U....................................................................63 LED states.............................................................64 provisioning........................................................100 RJ-45 connector pinouts......................................231 ISDN PRI PIM...............................................................57 ISDN provisioning......................................................100 See also ISDN BRI ports

J J-Flow license.............................................................152 J-series establishing secure Web access..........................143 establishing software connectivity......................117 hardware................................................................7 hardware replacement........................................161 hardware return..................................................205 HTTPS Web access.............................................143 installation and connection.................................103 JUNOS software with enhanced services overview...........................................................33 licenses...............................................................151 models available.....................................................3 network cables and connectors...........................215 PIMs.....................................................................43 safety and compliance........................................233 site preparation.....................................................89 SSL access...........................................................143 user interfaces See user interfaces J-series Services Router licenses...............................................................152 J-Web configuration editor basic settings......................................................136 initial configuration.............................................136 secure access......................................................148 J-Web interface configuration editor See J-Web configuration editor connecting..........................................................123 context-sensitive help.....................................72, 83 Help (?) icon..........................................................73 Internet Explorer, modifying for worldwide version of JUNOS software with enhanced services.......71 managing licenses..............................................153 overview...............................................................69 page layout...........................................................72 Quick Configuration See Quick Configuration regaining lost DHCP lease after initial configuration...................................................130 sessions................................................................77 side pane..............................................................74 starting.................................................................71 top pane...............................................................72 windows, multiple, unpredictable results with...................................................................77 J-Web Quick Configuration See Quick Configuration J2320 boot devices..........................................................12 boot sequence......................................................12 chassis....................................................................8 chassis cover, replacing......................................166 compact flash location........................................169 compact flash, replacing.....................................169 cooling system......................................................19 electrical specifications.........................................95 external compact flash..........................................18

Index

■

283


fans.......................................................................19 front panel............................................................13 hardware..........................................................7, 20 installation..........................................................105 interfaces supported.............................................46 mounting brackets..............................................105 overview.................................................................4 physical specifications..........................................11 PIMs supported.....................................................46 ports supported....................................................46 power management..............................................98 Routing Engine, hardware.....................................12 USB port...............................................................17 J2350 air filter, replacing...............................................195 boot devices..........................................................12 boot sequence......................................................12 chassis....................................................................8 chassis cover, replacing......................................166 compact flash location........................................169 compact flash, replacing.....................................169 cooling system......................................................19 electrical specifications.........................................95 external compact flash..........................................18 fans.......................................................................19 front panel............................................................13 hardware..........................................................7, 20 installation..........................................................105 interfaces supported.............................................46 mounting brackets..............................................105 overview.................................................................4 physical specifications..........................................11 PIMs supported.....................................................46 ports supported....................................................46 power management..............................................98 power system.......................................................18 restricted access installation...............................105 Routing Engine, hardware.....................................12 USB port...............................................................17 J4350 4-Port Fast Ethernet ePIM.....................................62 4-Port ISDN BRI S/T PIM.......................................63 4-Port ISDN BRI U PIM..........................................63 ADSL PIM..............................................................64 air filter, replacing...............................................196 boot devices..........................................................25 boot sequence......................................................25 chassis..................................................................21 cooling system......................................................32 Dual-Port Channelized T1/E1/ISDN PRI PIM..........57 Dual-Port E1 PIM..................................................56 Dual-Port Fast Ethernet PIM..................................61 Dual-Port Serial PIM..............................................55 Dual-Port T1 PIM..................................................56 electrical specifications.........................................95 fans.......................................................................32

284

■

Index

front panel............................................................26 FRUs, replacing...................................................161 G.SHDSL PIM........................................................66 Gigabit Ethernet ePIM...........................................52 Gigabit Ethernet uPIMs.........................................49 hardware..............................................................20 hardware components..........................................24 hardware, replacing............................................161 installation..........................................................106 interfaces supported.............................................47 mounting brackets, installing..............................107 overview.................................................................5 physical specifications..........................................24 PIM overview........................................................46 PIMs supported.....................................................47 ports supported....................................................47 power management..............................................98 power system.......................................................30 restricted access installation.............19, 31, 32, 106 Routing Engine, hardware.....................................25 USB port...............................................................30 J6350 4-Port Fast Ethernet ePIM.....................................62 4-Port ISDN BRI S/T PIM.......................................63 4-Port ISDN BRI U PIM..........................................63 ADSL PIM..............................................................64 air filter, replacing...............................................196 boot devices....................................................12, 25 boot sequence......................................................25 chassis..................................................................21 cooling system......................................................32 Dual-Port Channelized T1/E1/ISDN PRI PIM..........57 Dual-Port E1 PIM..................................................56 Dual-Port Fast Ethernet PIM..................................61 Dual-Port Serial PIM..............................................55 Dual-Port T1 PIM..................................................56 E3 PIM..................................................................59 electrical specifications.........................................95 fans.......................................................................32 front panel............................................................26 FRUs, replacing...................................................161 G.SHDSL PIM........................................................66 Gigabit Ethernet ePIM...........................................52 Gigabit Ethernet uPIMs.........................................49 hardware..............................................................20 hardware components..........................................24 hardware, replacing............................................161 installation..........................................................106 interfaces supported.............................................47 mounting brackets, installing..............................107 overview.................................................................6 physical specifications..........................................24 PIM overview........................................................46 PIMs supported.....................................................47 ports supported....................................................47 power management..............................................98

Index

power supplies See power supplies, J6350 restricted access installation.............19, 31, 32, 106 Routing Engine, hardware.....................................25 T3 PIM..................................................................59 USB port...............................................................30 Japan, compliance statement.....................................272 JTAC (Juniper Networks Technical Assistance Center) contacting...........................................................203 contacting for hardware return...........................208 information required for hardware return...........208 Juniper Networks Technical Assistance Center See JTAC JUNOS CLI CLI terminal..........................................................78 command completion...........................................82 command hierarchy..............................................78 command modes..................................................70 command prompts See command prompts connecting locally...............................................125 connecting remotely...........................................126 console.................................................................78 context-sensitive help...........................................83 editing keystrokes.................................................81 environment, changing.........................................84 idle time...............................................................85 managing licenses..............................................155 overview...............................................................70 screen length........................................................86 screen width.........................................................86 ssh........................................................................78 starting.................................................................78 telnet....................................................................78 terminal type........................................................86 working directory.................................................85 JUNOS Internet software establishing secure Web access..........................143 JUNOS software establishing connectivity.....................................117 Internet Explorer, modifying for worldwide version..............................................................71 worldwide version, modifying Internet Explorer for.....................................................................71 JUNOS software with enhanced services feature summary..................................................36 processes..............................................................35 JUNOScope application................................................36 JUNOScript API defining access (Quick Configuration).................132 enabling secure access........................................145 management access...........................................121 verifying secure access configuration..................149 JUNOScript over SSL..................................................145

K key sequences, editing, in CLI......................................81

L labels, serial number..........................................205, 206 laptop See management device lasers beam warning.....................................................259 Class 1 product warning.....................................258 open aperture warning.......................................260 safety guidelines.................................................258 leaf statements.............................................................81 LEDs ACTIVITY status (dual-port PIM)............................61 ADSL PIM status...................................................65 ADSL port status...................................................65 ALARM............................................................15, 28 channelized E1 ports............................................59 channelized T1 ports.............................................59 Class 1 product warning.....................................258 E1 port status........................................................57 E3 port status........................................................60 Fast Ethernet port status (4-port ePIM)..................63 Fast Ethernet port status (dual-port PIM)...............61 G.SHDSL PIM status..............................................67 Gigabit Ethernet port status......................17, 29, 54 HA..................................................................16, 29 ISDN PIM status....................................................64 ISDN port status....................................................64 J4350 power supply..............................................31 J6350 power supply..............................................31 LAN port status...............................................17, 29 LINK.........................................................17, 29, 54 link activity (4-Port Fast Ethernet ePIM)................63 link status (4-port ePIM)........................................63 LINK/ SPEED status (Dual-Port Fast Ethernet PIM)..................................................................61 ONLINE status (ADSL PIM)....................................65 ONLINE status (G.SHDSL PIM)..............................67 ONLINE status (ISDN BRI PIMs)............................64 POWER...........................................................14, 27 safety warnings...................................................257 serial port status...................................................56 SHDSL port status.................................................67 STATUS (router)..............................................15, 28 T1 port status........................................................57 T3 port status........................................................60 TX/RX.......................................................17, 29, 54 license infringement identifying any licenses needed..........................153 verifying license usage........................................157 verifying licenses installed..................................156 license keys components........................................................152 displaying (CLI)...................................................158 displaying (J-Web)...............................................154 status..................................................................153 version................................................................153

Index

■

285


licenses adding (CLI)........................................................155 adding (J-Web)....................................................154 BGP route reflectors............................................152 deleting (CLI).......................................................156 deleting (J-Web)..................................................154 displaying (CLI)...................................................156 displaying (J-Web)...............................................153 displaying usage.................................................157 downloading (J-Web)...........................................155 group..................................................................154 infringement, preventing....................................153 See also license infringement J-Flow traffic analysis..........................................152 J-series Services Router ......................................152 key......................................................................152 See also license keys managing (CLI)...................................................155 managing (J-Web)...............................................153 overview.............................................................151 preparation for....................................................153 saving (CLI).........................................................156 traffic analysis.....................................................152 verifying.............................................................156 lifting guidelines.........................................................252 lightening activity warning.........................................264 link activity LED (4-Port Fast Ethernet ePIM)................63 LINK LED.........................................................17, 29, 54 link status LED (4-Port Fast Ethernet ePIM)..................63 LINK/ SPEED LED (Dual-Port Fast Ethernet PIM)..........61 lithium battery compliance........................................269 lo0.0..........................................................................120 local connection to the router console port................125 loopback address defining (configuration editor)............................139 defining (Quick Configuration)............................131 overview.............................................................120 LX transceiver Gigabit Ethernet ePIM...........................................55 Gigabit Ethernet uPIM...........................................52

M main pane, J-Web........................................................73 maintenance AC power cord, replacing....................................181 air filter...............................................................196 console port cable (chassis).................................162 Crypto Accelerator Module..........................188, 191 DC power cable, replacing..................................184 DRAM modules...................................................178 external compact flash........................................174 internal compact flash................................168, 171 PIM cables..........................................................165 PIMs...................................................................162 power system.....................................................181

286

■

Index

tools and parts required......................................161 USB storage device.............................................176 warnings.............................................................261 major (red) alarms PIMs...................................................................200 Routing Engine...................................................200 management access...................................................121 management device connecting through the CLI.................................126 connecting to J-Web....................................123, 124 management interface address after initial configuration.....................................120 before initial configuration..................................120 defining (configuration editor)............................139 defining (Quick Configuration)............................131 during initial configuration..................................120 loopback.............................................................120 management interfaces.............................................120 management ports.................................................17, 29 See also management interface address; management interfaces management software process....................................35 manuals comments on.......................................................xix memory See compact flash; DRAM modules; USB mgd process................................................................35 midplane................................................................12, 25 minor (yellow) alarms alternative boot device........................................200 internal compact flash........................................200 Routing Engine...................................................200 modem commands at remote end.....................................................128 at router end.......................................................127 modem connection to router console port configuring modem at router end.......................127 configuring modem at user end..........................128 connecting modem to router..............................128 overview.............................................................126 monoammonium phosphate........................................93 mounting brackets installing on J4350 and J6350.............................109 on J2320 and J2350............................................105 multiple routers safe rack order............................................105, 107

N NEBS (Network Equipment Building System) identifying NEBS-compliant routers......................32 shutdown temperature for NEBS-compliant routers........................................................19, 32 network cable pinouts................................................215 Network Equipment Building System See NEBS network security process.............................................35 Network Time Protocol (NTP) server See NTP server

Index

notice icons................................................................xvii nsd process..................................................................35 nsrpd process...............................................................35 NT1 device, provisioning information........................100 NTP server defining (configuration editor)............................138 defining (Quick Configuration)............................131 overview.............................................................119

O OK button J-Web configuration editor....................................76 Quick Configuration..............................................75 ONLINE LEDs ADSL PIM status...................................................65 channelized E1 ports............................................59 channelized T1 ports.............................................59 G.SHDSL PIM status..............................................67 ISDN BRI PIM status..............................................64 openssl command......................................................145 operating system See JUNOS software with enhanced services operational mode commands............................................................79 prompt (>)...........................................................79 overview J2320......................................................................4 J2350......................................................................4 J4350......................................................................5 J6350......................................................................6

P packing materials packing a Services Router for shipment..............210 packing components for shipment......................210 saving.................................................................104 pages, layout in J-Web..................................................72 parentheses, in syntax descriptions.............................xix password See root password PC See management device personnel warning.....................................................236 PIC See PIMs PIM number, always 0...............................................166 PIMs (Physical Interface Modules) 4-Port Fast Ethernet..............................................62 4-Port ISDN BRI....................................................63 ADSL.....................................................................64 cables and connectors........................................215 Dual-Port Channelized T1/E1/ISDN PRI PIM..........57 Dual-Port E1.........................................................56 Dual-Port Fast Ethernet.........................................61 Dual-Port Serial.....................................................55 Dual-Port T1.........................................................56 E3 ........................................................................59

failure.................................................................200 field-replaceable PIMs...........................................46 G.SHDSL ..............................................................66 Gigabit Ethernet ePIMs..........................................52 Gigabit Ethernet uPIMs.........................................49 heat dissipation.....................................................98 installing.............................................................164 installing cables..................................................165 LEDs See LEDs major (red) alarm................................................200 midplane to Routing Engine............................12, 25 non-hot-swappability............................43, 163, 164 offline, troubleshooting.......................................201 overview...............................................................43 PIM number, always 0................................166, 205 power consumption..............................................98 power management, planning..............................98 power management, troubleshooting.................201 removing............................................................162 replacing cables..................................................165 serial number label.............................................208 slot numbering, J2320 and J2350..........................14 slot numbering, J4350 and J6350..........................26 T3 ........................................................................59 pinouts ADSL RJ-11 connector.........................................230 chassis console DB-9 connector..........................227 chassis console port............................................226 EIA-530A DCE serial cable..................................221 EIA-530A DTE serial cable..................................220 Fast Ethernet connector......................................225 Gigabit Ethernet connector (ePIM)......................226 Gigabit Ethernet connector (uPIMs).....................225 ISDN RJ-45 connector.........................................231 RJ-45 chassis console connector.........................226 RJ-48 connector to DB-15 connector (crossover).......................................................229 RJ-48 connector to DB-15 connector (straight)..........................................................229 RJ-48 connector to RJ-48 connector (crossover).......................................................228 RJ-48 connector to RJ-48 connector (straight)..........................................................228 RS-232 DCE serial cable......................................217 RS-232 DTE serial cable......................................216 RS-422/449 (EIA-449) DCE serial cable...............219 RS-422/449 (EIA-449) DTE serial cable...............217 SHDSL RJ-11 connector.......................................230 V.35 DCE serial cable..........................................223 V.35 DTE serial cable..........................................222 X.21 DCE serial cable..........................................224 X.21 DTE serial cable..........................................223 plug types, AC..............................................................96 ports 0.........................................................................120 ADSL See ADSL ports

Index

■

287


AUX................................................................17, 30 cables, PIM, installing.........................................165 cables, WAN, removing......................................165 channelized See channelized E1 ports; channelized T1 ports console (chassis).............................................17, 30 See also console port DS1 See E1 ports; T1 ports DS3 See E3 ports; T3 ports E1 See E1 ports E3 See E3 ports G.SHDSL See SHDSL ports interface naming.................................................166 ISDN See ISDN BRI ports J2320 types supported..........................................46 J2350 types supported..........................................46 J4350 types supported..........................................47 J6350 types supported..........................................47 lo0.0...................................................................120 serial See serial ports SHDSL See SHDSL ports T1 See T1 ports T3 See T3 ports USB.................................................................17, 30 power AC power See AC power applying..............................................................115 button.............................................................14, 27 connecting..........................................................110 consumption, PIMs...............................................98 DC power See DC power grounding requirement.......................................109 LED.................................................................14, 27 managing..............................................................98 power cables See DC power cables power cords See AC power cords power supplies See power supplies power system See power system removing............................................................115 requirements........................................................95 troubleshooting...................................................201 power button.........................................................14, 27 power cables See DC power cables power cords See AC power cords POWER LED..........................................................14, 27 power management planning...............................................................98 troubleshooting...................................................201 power supplies J2320....................................................................18 J2350....................................................................18 J4350....................................................................30 J6350 See power supplies, J6350 LED states.............................................................31

288

■

Index

power supplies, J6350 blank panel required in empty slot.....................181 dedicated AC power feed requirement................184 dedicated DC power feed requirement...............187 description............................................................31 installing AC........................................................183 installing DC.......................................................186 LED states.............................................................31 redundancy...........................................................31 removing AC.......................................................182 removing DC.......................................................185 serial number label.............................................208 power system connecting..................................................111, 112 fan..................................................................19, 32 J2320....................................................................18 J4350....................................................................30 J6350....................................................................31 power supply LED.................................................31 preparing for installation..............................................89 processes, software chassis process.....................................................35 forwarding process...............................................35 interface process...................................................35 management process............................................35 routing protocol process.......................................35 product disposal.........................................................267 product overview...........................................................3 prompt See command prompts; restart-after-upgrade prompt provisioning an ISDN line...........................................100

Q Quick Configuration basic settings......................................................129 buttons.................................................................75 initial configuration.............................................129 Secure Access page.............................................146 secure Web access..............................................145 Set Up page........................................................130

R rack installation general requirements............................................90 lifting guidelines..................................................252 mounting brackets..............................................109 order of multiple routers.............................105, 107 procedure...................................................105, 106 safety guidelines and warnings...........................253 securing rack to building.......................................91 size requirements...........................................90, 91 support for front-mount rack..........................90, 91 ventilation requirement..................................90, 91 radio frequency interference (RFI), reducing................94

Index

ramp angle requirement............................................257 read or write error, Routing Engine............................200 red alarms See major alarms red asterisk (*).............................................................73 redundant J6350 power supplies description............................................................31 safety guidelines for power sources....................241 regulatory compliance................................................233 remote connection to router console port configuring modem at router end.......................127 configuring modem at user end..........................128 connecting modem to router..............................128 overview.............................................................126 replacement AC power cord....................................................181 air filter...............................................................196 console port cable (chassis).................................162 Crypto Accelerator Module..........................188, 191 DC power cable..................................................184 DRAM modules...................................................178 external compact flash........................................174 internal compact flash................................168, 171 PIM cables..........................................................165 PIMs...................................................................162 power system (J6350).........................................181 tools and parts required......................................161 USB storage device.............................................176 request chassis pic fpc-slot command........................165 request system license add command.......................155 request system license add terminal command.........155 request system license delete command....................156 request system license save command......................156 required entry .............................................................73 reset power button for restart..................................14, 27 RESET CONFIG button for factory configuration...................................................202 RESET CONFIG button for factory configuration.....................................202 restart-after-upgrade prompt........................................85 Return Materials Authorization See RMA returning hardware....................................................205 packing a Services Router for shipment..............210 packing components for shipment......................210 procedure...........................................................208 tools and parts required......................................209 RJ-45 connector pinouts chassis console port............................................226 Fast Ethernet port...............................................225 Gigabit Ethernet port (ePIM)................................226 Gigabit Ethernet port (uPIMs)..............................225 RJ-45 to DB-9 serial port adapter chassis console port....................................125, 128 RJ-48 connector to DB-15 connector (crossover) pinouts...................................................................229

RJ-48 connector to DB-15 connector (straight) pinouts...................................................................229 RJ-48 connector to RJ-48 connector (crossover) pinouts...................................................................228 RJ-48 connector to RJ-48 connector (straight) pinouts...................................................................228 RMA (Return Materials Authorization)........................205 number...............................................................209 packing a Services Router for shipment..............210 packing components for shipment......................210 procedure...........................................................208 tools and parts required......................................209 root password at initial local connection (none).........................125 at initial remote connection (none).....................129 characteristics.....................................................119 defining (cli wizard)............................................133 defining (configuration editor)............................138 defining (Quick Configuration)............................130 required to commit a configuration....................119 route reflectors, BGP, license......................................152 router See Services Router Routing Engine fan..................................................................19, 32 fan failure...........................................................200 J2320 functions and components.........................12 J2350 functions and components.........................12 J4350 functions and components.........................25 J6350 functions and components.........................25 major (red) alarm................................................200 midplane to PIMs............................................12, 25 minor (yellow) alarm..........................................200 read or write error..............................................200 too warm............................................................200 routing protocol software process................................35 rpd process..................................................................35 RS-232 DCE cable pinouts..........................................217 RS-232 DTE cable pinouts..........................................216 RS-422/449 (EIA-449) DCE cable pinouts...................219 RS-422/449 (EIA-449) DTE cable pinouts...................217

S S/T port See ISDN BRI ports safety guidelines and warnings AC power............................................................239 battery handling.................................................262 DC power (general).............................................240 DC power disconnection.....................................241 DC power wiring sequence warning...................243 DC power wiring terminations warning..............245 DC power, grounding requirements and warning...........................................................242 DC power, redundant power supplies.................241 electrical.............................................................238 general................................................................235

Index

■

289


grounded equipment..........................................246 in case of electrical accident...............................247 installation..........................................................252 jewelry removal..................................................263 lasers and LEDs..................................................257 levels..................................................................233 lightening activity...............................................264 maintenance and operation................................261 multiple power supplies .....................................247 operating temperature........................................265 power disconnection...........................................249 product disposal.................................................267 rack-mounting....................................................253 ramps.................................................................257 read installation instructions...............................252 telecommunications cord....................................251 TN power system................................................250 safety standards.........................................................268 fire safety..............................................................92 sample configuration for basic connectivity..........................................140 for secure access.................................................150 for SSL certificates..............................................149 saving licenses (CLI)...................................................156 screen length, CLI, setting ...........................................86 screen width, CLI, setting ............................................86 secure access generating SSL certificates..................................145 HTTPS access (configuration editor)....................148 HTTPS access (Quick Configuration)...................145 HTTPS recommended.........................................144 installing SSL certificates (configuration editor).............................................................148 installing SSL certificates (Quick Configuration).................................................145 JUNOScript SSL access........................................145 overview.............................................................144 requirements......................................................144 sample configuration..........................................150 verifying secure access configuration..................149 Secure Access page description..........................................................146 field summary....................................................147 Secure Sockets Layer See SSL serial number chassis components, label..........................205, 206 PIMs...................................................................208 power supply......................................................208 serial ports cables and connectors........................................215 Dual-Port Serial PIM..............................................55 EIA-530A DCE pinouts........................................221 EIA-530A DTE pinouts........................................220 LED states.............................................................56 RS-232 DCE pinouts............................................217 RS-232 DTE pinouts............................................216

290

■

Index

RS-422/449 (EIA-449) DCE pinouts.....................219 RS-422/449 (EIA-449) DTE pinouts.....................217 V.35 DCE pinouts................................................223 V.35 DTE pinouts................................................222 X.21 DCE pinouts...............................................224 X.21 DTE pinouts................................................223 service provider, contacting for ISDN provisioning...........................................................100 Services Router backup................................................................120 clearance..............................................................89 connecting..........................................................123 establishing secure Web access..........................143 establishing software connectivity......................117 grounding a DC-powered model.........................113 grounding an AC-powered model........................110 hardware................................................................7 hardware replacement........................................161 hardware return..................................................205 HTTPS Web access.............................................143 installation and connection.................................103 licenses...............................................................151 network cables and connectors...........................215 operating environment.........................................92 overview.................................................................3 packing for shipment..........................................210 PIM overview........................................................43 powering on and off...........................................115 preparation checklist...........................................101 safety and compliance........................................233 site preparation.....................................................89 software................................................................33 SSL access...........................................................143 unpacking...........................................................104 user interfaces See user interfaces sessions, J-Web............................................................77 set cli commands.........................................................85 Set Up page description..........................................................129 field summary....................................................130 setup configuration editor............................................136 Quick Configuration............................................129 requirements......................................................122 SFP Gigabit Ethernet ePIMs optical interface support.......................................54 overview...............................................................52 SFPs supported.....................................................53 SFP Gigabit Ethernet uPIMs optical interface support.......................................52 overview...............................................................49 SHDSL ports description............................................................66 LED states on a G.SHDSL PIM...............................67 RJ-11 connector pinouts......................................230

Index

shipping carton packing a Services Router for shipment..............210 packing components for shipment......................210 saving.................................................................104 show chassis alarms command..................................199 show chassis fpc pic-status command........................166 show chassis hardware command identifying NEBS-compliant routers......................32 locating component serial numbers....................205 verifying Crypto Accelerator Module installation..............................................191, 194 show chassis power-ratings command.......................201 show chassis routing-engine command checking CPU temperature.............................19, 32 checking DRAM amount.................................12, 25 verifying DRAM installation and configuration...................................................181 show cli command.......................................................84 show system license command..................................156 explanation.........................................................157 show system license keys command.........................158 show system license usage command........................157 explanation.........................................................157 shutdown graceful...............................................................115 immediate..........................................................115 temperature See shutdown temperature shutdown temperature NEBS-compliant routers..................................19, 32 non-NEBS-compliant routers.................................32 side pane, J-Web..........................................................74 signaling limitations.....................................................94 site preparation checklist..............................................................101 electrical wiring guidelines....................................94 fire safety..............................................................92 for rack installation...............................................90 guidelines.............................................................89 operating environment.........................................92 power requirements.............................................95 size J2320....................................................................11 J2350....................................................................11 J4350....................................................................24 J6350....................................................................24 requirements for rack installation...................90, 91 slot numbers, PIM chassis diagram..............................................14, 26 displayed as FPC number in command output.............................................................166 small form-factor pluggable transceivers See SFP SNMP (Simple Network Management Protocol), no Gigabit Ethernet support.....................................51, 54 software features.................................................................33

specifications AC electrical connection........................................95 AC power cords....................................................96 DC electrical connection.......................................97 DC power cables...................................................97 electrical...............................................................95 environmental......................................................92 grounding cable..................................................109 J2320 hardware....................................................11 J2350 hardware....................................................11 J4350 hardware....................................................24 J6350 hardware....................................................24 serial PIM cables and connectors........................215 SFP Gigabit Ethernet ePIM....................................54 SFP Gigabit Ethernet uPIMs...................................52 SRC application............................................................36 SSH defining (configuration editor)............................138 defining access (Quick Configuration).................132 management access...........................................121 SSL (Secure Sockets Layer) enabling secure access (Quick Configuration).................................................145 management access...........................................144 verifying SSL configuration.................................149 SSL 3.0 option, disabling on Internet Explorer for worldwide version of JUNOS software......................71 SSL certificates adding (configuration editor)...............................149 adding (Quick Configuration)..............................147 generating...........................................................145 sample configuration..........................................149 verifying SSL configuration.................................149 standards compliance................................................268 startup J-Web interface.....................................................71 JUNOS CLI.............................................................78 Services Router...................................................115 standby power....................................................115 statements, configuration types...................................81 status license key..........................................................153 router..............................................................15, 28 See also STATUS LEDs STATUS LEDs ADSL ports............................................................65 channelized E1 ports............................................59 channelized T1 ports.............................................59 E1 ports................................................................57 E3 ports................................................................60 ISDN ports............................................................64 router status....................................................15, 27 serial ports............................................................56 SHDSL ports..........................................................67 T1 ports................................................................57 T3 ports................................................................60

Index

■

291


storage media replacing the external compact flash..................174 replacing the internal compact flash...........168, 171 replacing the USB storage device........................176 support, technical See technical support SX transceiver Gigabit Ethernet ePIM...........................................55 Gigabit Ethernet uPIM...........................................52 symmetric high-speed digital subscriber line See SHDSL syntax conventions....................................................xviii system overview hardware................................................................7 software................................................................33 system time defining (Quick Configuration)............................131 overview.............................................................119 synchronizing (configuration editor)...................138 synchronizing (Quick Configuration)...................131

TN power system.......................................................250 tolerances, environmental............................................92 tools and equipment for component replacement...............................161 for hardware return............................................209 top pane, J-Web...........................................................72 traffic analysis license................................................152 troubleshooting a Services Router, hardware components chassis alarm conditions.....................................200 offline PIMs.........................................................201 power management............................................201 turning on a Services Router......................................115 TX/RX LED.......................................................17, 29, 54 Type C fire extinguishers..............................................93 types of configuration statements................................81

U T T1 ports description............................................................56 See also channelized T1 ports LED states.............................................................57 RJ-48 cable pinouts.............................................227 T3 ports BNC connector pinouts.......................................230 description............................................................59 LED states.............................................................60 taskbar.........................................................................73 technical support contacting JTAC.....................................................xx contacting JTAC for hardware return...................208 information required for hardware return...........208 telecommunications line wire gauge..........................251 Telnet defining access (Quick Configuration).................131 management access...........................................121 temperature required for operation...........................................92 Routing Engine, too warm..................................200 shutdown, NEBS-compliant routers.................19, 32 shutdown, non-NEBS-compliant routers................32 warning..............................................................265 temperature alarm, air filter replacement for.............196 terminal type, setting ..................................................86 terminology basic connectivity...............................................117 PIMs.....................................................................43 secure Web access..............................................143 thermal output.............................................................92 time See system time time zone...................................................................119 defining (configuration editor)............................138 defining (Quick Configuration)............................131

292

■

Index

U port See ISDN BRI ports United States, compliance statements........................273 universal serial bus See USB unpacking the router..................................................104 uPIMs, Gigabit Ethernet See Gigabit Ethernet uPIMs URLs datasheets.............................................................43 PIM information and datasheets...........................43 return and repair policies....................................209 support...............................................................203 USB (universal serial bus) storage device, installing.....................................177 storage device, removing....................................176 storage device, replacing.....................................176 USB port.........................................................17, 30 user interfaces J-Web graphical user interface (GUI)......................36 See also J-Web interface JUNOS command-line interface (CLI)....................36 See also JUNOS CLI JUNOScope application.........................................36 overview...............................................................69 preparation...........................................................71 SRC application.....................................................36

V V.35 DCE cable pinouts..............................................223 V.35 DTE cable pinouts..............................................222 ventilation requirement................................................89 verification active licenses.....................................................156 basic connectivity...............................................139 license usage.......................................................157 licenses ..............................................................156 secure access......................................................149 version, license key....................................................153

Index

W warnings battery handling.................................................262 DC power cables.................................................240 DC power disconnection.....................................241 DC power plant and chassis ground......................97 DC wiring sequence............................................243 DC wiring terminations.......................................245 DC-powered J4350 and J6350 routers, restricted access installation only .....................................94 earthed mains socket (Norway and Sweden only)................................................................247 electrical.............................................................237 ESD strap to prevent router damage.....................21 follow lifting guidelines...............................105, 107 general................................................................235 grounded equipment..........................................246 installation..........................................................252 jewelry removal..................................................263 laser and LED.....................................................257 levels defined......................................................233 lightening activity...............................................264 maintenance and operational.............................261 multiple power supply disconnection..................247 operating temperature........................................265 personnel............................................................236 power disconnection...........................................249 product disposal.................................................267 rack-mounting requirements...............................253 ramp angle.........................................................257 read installation instructions...............................252 restricted access location for DC-powered routers..................................19, 31, 32, 105, 106 rotating fans, compact flash replacement............................................169, 172 safe rack order for multiple routers.............105, 107 telecommunications lines...................................251 TN power system................................................250 Web access, secure See secure access Web browser, modifying Internet Explorer for worldwide version of JUNOS software......................71 weight J2320....................................................................11 J2350....................................................................11 J4350....................................................................24 J6350....................................................................24 rack-mount requirements...............................90, 91 windows, J-Web, unpredictable results with multiple....................................................................77 wire gauge for grounding cables...........................................109 for telecommunications lines..............................251 wiring guidelines DC wiring sequence warning..............................243 DC wiring terminations warning.........................245 radio frequency interference (RFI)........................94

signaling limitations..............................................94 suppressing electromagnetic interference (EMI).................................................................94 working directory, setting............................................85

X X.21 DCE cable pinouts.............................................224 X.21 DTE cable pinouts..............................................223

Index

■

293


294

■

Index

Getting Started Guide - Juniper Networks

Getting Started Guide - Juniper Networks

Suggest Documents